diff --git a/.github/workflows/codecov.yml b/.github/workflows/codecov.yml index 2767120..d209bf6 100644 --- a/.github/workflows/codecov.yml +++ b/.github/workflows/codecov.yml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 with: egress-policy: audit diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 245f14d..a94e3a7 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -42,7 +42,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml index d08d06f..60a4ef3 100644 --- a/.github/workflows/go.yml +++ b/.github/workflows/go.yml @@ -12,7 +12,7 @@ jobs: runs-on: ${{ matrix.os }} steps: - name: Harden Runner - uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml index d8d7c76..84b86cb 100644 --- a/.github/workflows/golangci-lint.yml +++ b/.github/workflows/golangci-lint.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/mysql.yml b/.github/workflows/mysql.yml index 78ed421..e5b7151 100644 --- a/.github/workflows/mysql.yml +++ b/.github/workflows/mysql.yml @@ -24,7 +24,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 with: egress-policy: audit allowed-endpoints: > diff --git a/.github/workflows/pg.yml b/.github/workflows/pg.yml index e162538..717a363 100644 --- a/.github/workflows/pg.yml +++ b/.github/workflows/pg.yml @@ -23,7 +23,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 with: egress-policy: audit allowed-endpoints: > diff --git a/.github/workflows/s2.yml b/.github/workflows/s2.yml index 387e790..28e5700 100644 --- a/.github/workflows/s2.yml +++ b/.github/workflows/s2.yml @@ -23,7 +23,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@6c3c2f2c1c457b00c10c4848d6f5491db3b629df + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs