|
@@ -26,7 +26,7 @@ jobs:
|
|
|
contents: read
|
|
contents: read
|
|
|
steps:
|
|
steps:
|
|
|
- name: Harden the runner (Audit all outbound calls)
|
|
- name: Harden the runner (Audit all outbound calls)
|
|
|
- uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
|
|
|
|
|
|
|
+ uses: step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
|
|
|
with:
|
|
with:
|
|
|
egress-policy: audit
|
|
egress-policy: audit
|
|
|
|
|
|
|
@@ -69,7 +69,7 @@ jobs:
|
|
|
contents: write # to create a release and push new docs
|
|
contents: write # to create a release and push new docs
|
|
|
steps:
|
|
steps:
|
|
|
- name: Harden the runner (Audit all outbound calls)
|
|
- name: Harden the runner (Audit all outbound calls)
|
|
|
- uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
|
|
|
|
|
|
|
+ uses: step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
|
|
|
with:
|
|
with:
|
|
|
egress-policy: audit
|
|
egress-policy: audit
|
|
|
|
|
|
|
@@ -149,7 +149,7 @@ jobs:
|
|
|
RELEASE_TAG: ${{ github.event.inputs.version }}${{ matrix.tag_suffix }}
|
|
RELEASE_TAG: ${{ github.event.inputs.version }}${{ matrix.tag_suffix }}
|
|
|
|
|
|
|
|
steps:
|
|
steps:
|
|
|
- - uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
|
|
|
|
|
|
|
+ - uses: step-security/harden-runner@e3f713f2d8f53843e71c69a996d56f51aa9adfb9 # v2.14.1
|
|
|
with:
|
|
with:
|
|
|
egress-policy: audit
|
|
egress-policy: audit
|
|
|
- name: Checkout
|
|
- name: Checkout
|