diff --git a/.github/workflows/codecov.yml b/.github/workflows/codecov.yml index 2767120..ffa80ee 100644 --- a/.github/workflows/codecov.yml +++ b/.github/workflows/codecov.yml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df + uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 with: egress-policy: audit diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 3b0bec4..fb3f711 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -42,7 +42,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df + uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml index d08d06f..3b09775 100644 --- a/.github/workflows/go.yml +++ b/.github/workflows/go.yml @@ -12,7 +12,7 @@ jobs: runs-on: ${{ matrix.os }} steps: - name: Harden Runner - uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df + uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml index d8d7c76..94b9bca 100644 --- a/.github/workflows/golangci-lint.yml +++ b/.github/workflows/golangci-lint.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df + uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/mysql.yml b/.github/workflows/mysql.yml index 78ed421..1102d87 100644 --- a/.github/workflows/mysql.yml +++ b/.github/workflows/mysql.yml @@ -24,7 +24,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df + uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 with: egress-policy: audit allowed-endpoints: > diff --git a/.github/workflows/pg.yml b/.github/workflows/pg.yml index e162538..9296c62 100644 --- a/.github/workflows/pg.yml +++ b/.github/workflows/pg.yml @@ -23,7 +23,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df + uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 with: egress-policy: audit allowed-endpoints: > diff --git a/.github/workflows/s2.yml b/.github/workflows/s2.yml index 387e790..200930c 100644 --- a/.github/workflows/s2.yml +++ b/.github/workflows/s2.yml @@ -23,7 +23,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df + uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs