Merge pull request #187 from kommitters/v0.3

Release v0.3.8 - Fix indentation of scorecard workflow
kommitters · Jan 13, 2023 · b1d8c40 · b1d8c40
2 parents bd34fa1 + a36fae6
commit b1d8c40
Showing 1 changed file with 13 additions and 13 deletions.
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
@@ -22,19 +22,19 @@ jobs:
 
     steps:
       - name: Harden Runner
-          uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 # v2.0.0
-          with:
-            disable-sudo: true
-            egress-policy: block
-            allowed-endpoints: >
-              api.github.com:443
-              api.osv.dev:443
-              api.securityscorecards.dev:443
-              bestpractices.coreinfrastructure.org:443
-              fulcio.sigstore.dev:443
-              github.com:443
-              rekor.sigstore.dev:443
-              sigstore-tuf-root.storage.googleapis.com:443
+        uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 # v2.0.0
+        with:
+          disable-sudo: true
+          egress-policy: block
+          allowed-endpoints: >
+            api.github.com:443
+            api.osv.dev:443
+            api.securityscorecards.dev:443
+            bestpractices.coreinfrastructure.org:443
+            fulcio.sigstore.dev:443
+            github.com:443
+            rekor.sigstore.dev:443
+            sigstore-tuf-root.storage.googleapis.com:443
       - name: "Checkout code"
         uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
         with: