File tree Expand file tree Collapse file tree 6 files changed +8
-8
lines changed Expand file tree Collapse file tree 6 files changed +8
-8
lines changed Original file line number Diff line number Diff line change 20
20
security-events : write
21
21
steps :
22
22
- name : Harden runner
23
- uses : step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
23
+ uses : step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
24
24
with :
25
25
egress-policy : audit
26
26
- name : Checkout repository
Original file line number Diff line number Diff line change 14
14
pull-requests : write
15
15
steps :
16
16
- name : Harden runner
17
- uses : step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
17
+ uses : step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
18
18
with :
19
19
egress-policy : audit
20
20
- name : Checkout repository
Original file line number Diff line number Diff line change 17
17
- name : Checkout repository
18
18
uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
19
19
- name : Harden runner
20
- uses : step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
20
+ uses : step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
21
21
with :
22
22
egress-policy : audit
23
23
- name : Disable unprivileged user namespaces restrictions
Original file line number Diff line number Diff line change 17
17
id-token : write # Needed to publish results to OpenSSF API and get a badge (see publish_results below)
18
18
steps :
19
19
- name : Harden runner
20
- uses : step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
20
+ uses : step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
21
21
with :
22
22
egress-policy : audit
23
23
- name : Checkout repository
Original file line number Diff line number Diff line change 21
21
sha256-filename-darwin-x86_64 : ${{ steps.checksum.outputs.sha256-filename-darwin-x86_64 }}
22
22
steps :
23
23
- name : Harden runner
24
- uses : step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
24
+ uses : step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
25
25
with :
26
26
egress-policy : audit
27
27
- name : Checkout repository
89
89
CHECKSUMS : ${{ toJSON(needs.build.outputs) }}
90
90
steps :
91
91
- name : Harden runner
92
- uses : step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
92
+ uses : step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
93
93
with :
94
94
egress-policy : audit
95
95
- id : checksums
@@ -117,7 +117,7 @@ jobs:
117
117
if : startsWith(github.ref, 'refs/tags/v')
118
118
steps :
119
119
- name : Harden runner
120
- uses : step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
120
+ uses : step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
121
121
with :
122
122
egress-policy : audit
123
123
- name : Download x86_64 build artifact
Original file line number Diff line number Diff line change 21
21
runs-on : ${{ matrix.os }}
22
22
steps :
23
23
- name : Harden runner
24
- uses : step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
24
+ uses : step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
25
25
with :
26
26
egress-policy : audit
27
27
- name : Checkout repository
You can’t perform that action at this time.
0 commit comments