Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Suggested hardening #195

Closed
wants to merge 8 commits into from
Closed

Suggested hardening #195

Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
62f8816
Suggested hardening
therealryan Jan 9, 2023
7f40077
Added timeouts for example service discovery
therealryan Jan 11, 2023
3ba8a0c
Merge branch 'example_startup_hang' into harden-runners
therealryan Jan 11, 2023
c8d53b0
killed main thread
therealryan Jan 11, 2023
ccb7c47
Merge branch 'example_startup_hang' into harden-runners
therealryan Jan 11, 2023
c6d9bd5
moar blocking fixes
therealryan Jan 11, 2023
b09a30b
Merge branch 'example_startup_hang' into harden-runners
therealryan Jan 11, 2023
afb15f6
Merge remote-tracking branch 'origin/main' into harden-runners
therealryan Mar 21, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 12 additions & 1 deletion .github/workflows/test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,18 @@ jobs:
- name: Harden Runner
uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v2.2.1
with:
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
disable-sudo: true
egress-policy: block
allowed-endpoints: >
api.github.com:443
chromedriver.storage.googleapis.com:443
fonts.googleapis.com:443
fonts.gstatic.com:443
github.com:443
i.imgur.com:443
objects.githubusercontent.com:443
raw.githubusercontent.com:443
repo.maven.apache.org:443

- uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0

Expand Down