diff --git a/.github/workflows/assign-to-project.yml b/.github/workflows/assign-to-project.yml index 1b7a4bc..c0cb2c9 100644 --- a/.github/workflows/assign-to-project.yml +++ b/.github/workflows/assign-to-project.yml @@ -20,7 +20,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@2e205a28d0e1da00c5f53b161f4067b052c61f34 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 with: egress-policy: block allowed-endpoints: > diff --git a/.github/workflows/auto-assign-pr.yml b/.github/workflows/auto-assign-pr.yml index 2523408..31e9380 100644 --- a/.github/workflows/auto-assign-pr.yml +++ b/.github/workflows/auto-assign-pr.yml @@ -13,7 +13,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@2e205a28d0e1da00c5f53b161f4067b052c61f34 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 with: egress-policy: block allowed-endpoints: > diff --git a/.github/workflows/ci-build.yml b/.github/workflows/ci-build.yml index c0c3645..b99a4d8 100644 --- a/.github/workflows/ci-build.yml +++ b/.github/workflows/ci-build.yml @@ -21,7 +21,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@2e205a28d0e1da00c5f53b161f4067b052c61f34 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 with: egress-policy: block allowed-endpoints: > diff --git a/.github/workflows/codeql-scan.yml b/.github/workflows/codeql-scan.yml index 2c74092..a57e28a 100644 --- a/.github/workflows/codeql-scan.yml +++ b/.github/workflows/codeql-scan.yml @@ -37,7 +37,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@2e205a28d0e1da00c5f53b161f4067b052c61f34 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 with: egress-policy: block allowed-endpoints: > diff --git a/.github/workflows/docker-linter.yml b/.github/workflows/docker-linter.yml index 5e93028..19ccc5c 100644 --- a/.github/workflows/docker-linter.yml +++ b/.github/workflows/docker-linter.yml @@ -29,7 +29,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@2e205a28d0e1da00c5f53b161f4067b052c61f34 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/mark-stale.yml b/.github/workflows/mark-stale.yml index 9220cad..32695db 100644 --- a/.github/workflows/mark-stale.yml +++ b/.github/workflows/mark-stale.yml @@ -17,7 +17,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@2e205a28d0e1da00c5f53b161f4067b052c61f34 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 with: egress-policy: block allowed-endpoints: > diff --git a/.github/workflows/pr-labeler.yml b/.github/workflows/pr-labeler.yml index 8f04231..9faff87 100644 --- a/.github/workflows/pr-labeler.yml +++ b/.github/workflows/pr-labeler.yml @@ -19,7 +19,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@2e205a28d0e1da00c5f53b161f4067b052c61f34 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 with: egress-policy: block allowed-endpoints: > diff --git a/.github/workflows/release-build.yml b/.github/workflows/release-build.yml index a741b8c..2538134 100644 --- a/.github/workflows/release-build.yml +++ b/.github/workflows/release-build.yml @@ -21,7 +21,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@2e205a28d0e1da00c5f53b161f4067b052c61f34 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 with: egress-policy: block allowed-endpoints: > @@ -62,7 +62,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@2e205a28d0e1da00c5f53b161f4067b052c61f34 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 with: egress-policy: block allowed-endpoints: >