-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
[Dependencies]: Bump step-security/harden-runner from 2.8.0 to 2.8.1 (#…
…446) Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.8.0 to 2.8.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/step-security/harden-runner/releases">step-security/harden-runner's releases</a>.</em></p> <blockquote> <h2>v2.8.1</h2> <h2>What's Changed</h2> <ul> <li>Bug fix: Update isGitHubHosted implementation by <a href="https://github.com/varunsh-coder"><code>@varunsh-coder</code></a> in <a href="https://redirect.github.com/step-security/harden-runner/pull/425">step-security/harden-runner#425</a> The previous implementation incorrectly identified large GitHub-hosted runners as self-hosted runners. As a result, harden-runner was not executing on these large GitHub-hosted runners.</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/step-security/harden-runner/compare/v2...v2.8.1">https://github.com/step-security/harden-runner/compare/v2...v2.8.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/step-security/harden-runner/commit/17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6"><code>17d0e2b</code></a> Merge pull request <a href="https://redirect.github.com/step-security/harden-runner/issues/425">#425</a> from step-security/rc-9</li> <li><a href="https://github.com/step-security/harden-runner/commit/bb112d061bf5af75c824cf30dd69cb76b316bd3a"><code>bb112d0</code></a> Update isGitHubHosted implementation</li> <li><a href="https://github.com/step-security/harden-runner/commit/f4f3f445f343c08c93d7771433e8dee4267e05b9"><code>f4f3f44</code></a> Merge pull request <a href="https://redirect.github.com/step-security/harden-runner/issues/407">#407</a> from step-security/dependabot/github_actions/actions/...</li> <li><a href="https://github.com/step-security/harden-runner/commit/7a946b57df8fca5054684f5beffd1910f681dffd"><code>7a946b5</code></a> Bump actions/dependency-review-action from 3.1.3 to 4.3.2</li> <li><a href="https://github.com/step-security/harden-runner/commit/75a01c2f00ea1ad58b152418d054937c3583861d"><code>75a01c2</code></a> Merge pull request <a href="https://redirect.github.com/step-security/harden-runner/issues/417">#417</a> from step-security/dependabot/github_actions/step-sec...</li> <li><a href="https://github.com/step-security/harden-runner/commit/53413f1a91b85facf419e9a302ceb22702348ce9"><code>53413f1</code></a> Bump step-security/harden-runner from 2.7.1 to 2.8.0</li> <li>See full diff in <a href="https://github.com/step-security/harden-runner/compare/v2.8.0...v2.8.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=step-security/harden-runner&package-manager=github_actions&previous-version=2.8.0&new-version=2.8.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
- Loading branch information
Showing
14 changed files
with
26 additions
and
26 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -35,7 +35,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
@@ -84,7 +84,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
@@ -131,7 +131,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
@@ -178,7 +178,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -33,7 +33,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: block | ||
disable-sudo: true | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -27,7 +27,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: block | ||
disable-sudo: true | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -74,7 +74,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -23,7 +23,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -28,7 +28,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -42,7 +42,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -15,7 +15,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -96,7 +96,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
@@ -228,7 +228,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
@@ -271,7 +271,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
@@ -306,7 +306,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
@@ -341,7 +341,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
@@ -377,7 +377,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
@@ -424,7 +424,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
@@ -461,7 +461,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -26,7 +26,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
@@ -67,7 +67,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
@@ -104,7 +104,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -54,7 +54,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -34,7 +34,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -35,7 +35,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -24,7 +24,7 @@ jobs: | |
run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE" | ||
|
||
- name: "Harden Security" | ||
uses: step-security/[email protected].0 | ||
uses: step-security/[email protected].1 | ||
with: | ||
egress-policy: audit | ||
disable-sudo: true | ||
|