From bfaec54152b9e6afc7e98e9f64dea9fabb9a05b1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 1 Jul 2025 02:01:20 +0000 Subject: [PATCH] upgrade(ci): bump step-security/harden-runner in /.github/workflows Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.0.0 to 2.12.2. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5...6c439dc8bdf85cadbbce9ed30d1c7b959517bc49) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.12.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/auto-approve.yml | 2 +- .github/workflows/autoupdate.yml | 2 +- .github/workflows/create-labels.yml | 2 +- .github/workflows/fosstars-report.yml | 2 +- .github/workflows/gh-pages.yml | 4 ++-- .github/workflows/pnpm-publish.yml | 2 +- .github/workflows/pullrequest-linter.yml | 2 +- .github/workflows/pullrequest.yml | 6 +++--- .github/workflows/push.yml | 4 ++-- .github/workflows/rebase-issue.yml | 2 +- .github/workflows/stale.yml | 2 +- .github/workflows/wiki.yml | 2 +- 12 files changed, 16 insertions(+), 16 deletions(-) diff --git a/.github/workflows/auto-approve.yml b/.github/workflows/auto-approve.yml index fbd886f9..d573841b 100644 --- a/.github/workflows/auto-approve.yml +++ b/.github/workflows/auto-approve.yml @@ -16,7 +16,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 + uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 with: egress-policy: audit diff --git a/.github/workflows/autoupdate.yml b/.github/workflows/autoupdate.yml index 2b4485cb..a0be8c3c 100644 --- a/.github/workflows/autoupdate.yml +++ b/.github/workflows/autoupdate.yml @@ -13,7 +13,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 + uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 with: disable-sudo: true egress-policy: block diff --git a/.github/workflows/create-labels.yml b/.github/workflows/create-labels.yml index 05ee1a6a..1935db5e 100644 --- a/.github/workflows/create-labels.yml +++ b/.github/workflows/create-labels.yml @@ -13,7 +13,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 + uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 with: disable-sudo: true egress-policy: block diff --git a/.github/workflows/fosstars-report.yml b/.github/workflows/fosstars-report.yml index 55a23f94..3a830813 100644 --- a/.github/workflows/fosstars-report.yml +++ b/.github/workflows/fosstars-report.yml @@ -19,7 +19,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 + uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 with: disable-sudo: true egress-policy: block diff --git a/.github/workflows/gh-pages.yml b/.github/workflows/gh-pages.yml index 3fc8030f..3d6287c6 100644 --- a/.github/workflows/gh-pages.yml +++ b/.github/workflows/gh-pages.yml @@ -28,7 +28,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 + uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 with: egress-policy: audit @@ -63,7 +63,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 + uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 with: egress-policy: audit diff --git a/.github/workflows/pnpm-publish.yml b/.github/workflows/pnpm-publish.yml index 84f01952..62ea0f3b 100644 --- a/.github/workflows/pnpm-publish.yml +++ b/.github/workflows/pnpm-publish.yml @@ -14,7 +14,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 + uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 with: egress-policy: audit diff --git a/.github/workflows/pullrequest-linter.yml b/.github/workflows/pullrequest-linter.yml index df63fd7e..a6efa109 100644 --- a/.github/workflows/pullrequest-linter.yml +++ b/.github/workflows/pullrequest-linter.yml @@ -16,7 +16,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 + uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 with: egress-policy: audit diff --git a/.github/workflows/pullrequest.yml b/.github/workflows/pullrequest.yml index 8b1ca069..56044772 100644 --- a/.github/workflows/pullrequest.yml +++ b/.github/workflows/pullrequest.yml @@ -16,7 +16,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 + uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 with: disable-sudo: true egress-policy: block @@ -50,7 +50,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 + uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 with: egress-policy: audit @@ -88,7 +88,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 + uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 with: egress-policy: audit diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml index 533a400d..1fa3b97d 100644 --- a/.github/workflows/push.yml +++ b/.github/workflows/push.yml @@ -12,7 +12,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 + uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 with: disable-sudo: true egress-policy: block @@ -48,7 +48,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 + uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 with: egress-policy: audit diff --git a/.github/workflows/rebase-issue.yml b/.github/workflows/rebase-issue.yml index 68d2b076..8939c9fb 100644 --- a/.github/workflows/rebase-issue.yml +++ b/.github/workflows/rebase-issue.yml @@ -16,7 +16,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 + uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 with: egress-policy: audit diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml index e9079bfb..cfe62147 100644 --- a/.github/workflows/stale.yml +++ b/.github/workflows/stale.yml @@ -18,7 +18,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 + uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 with: egress-policy: audit diff --git a/.github/workflows/wiki.yml b/.github/workflows/wiki.yml index 11772fe7..87d1bf60 100644 --- a/.github/workflows/wiki.yml +++ b/.github/workflows/wiki.yml @@ -32,7 +32,7 @@ jobs: # More info: https://github.com/step-security/harden-runner. - name: Harden Runner id: harden_runner - uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 + uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 with: egress-policy: audit