Skip to content

chore(deps-dev): update step-security/harden-runner action to v2.12.1#129

Merged
renovate[bot] merged 1 commit intomasterfrom
renovate/step-security-harden-runner-2.x
Jun 14, 2025
Merged

chore(deps-dev): update step-security/harden-runner action to v2.12.1#129
renovate[bot] merged 1 commit intomasterfrom
renovate/step-security-harden-runner-2.x

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jun 14, 2025

This PR contains the following updates:

Package Type Update Change
step-security/harden-runner action patch v2.12.0 -> v2.12.1

Release Notes

step-security/harden-runner (step-security/harden-runner)

v2.12.1

Compare Source

What's Changed
  • Detection capabilities have been upgraded to better recognize attempts at runner tampering. These improvements are informed by real-world incident learnings, including analysis of anomalous behaviors observed in the tj-actions and reviewdog supply chain attack.
  • Resolved an issue where the block policy was not enforced correctly when the GitHub Actions job was running inside a container on a self-hosted VM runner.

Full Changelog: step-security/harden-runner@v2...v2.12.1


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@coveralls
Copy link

Pull Request Test Coverage Report for Build 15654524120

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • 2 unchanged lines in 1 file lost coverage.
  • Overall coverage increased (+0.1%) to 66.35%

Files with Coverage Reduction New Missed Lines %
internal/worker/pool.go 2 87.95%
Totals Coverage Status
Change from base Build 15312423511: 0.1%
Covered Lines: 558
Relevant Lines: 841

💛 - Coveralls

@renovate renovate bot merged commit b1bc576 into master Jun 14, 2025
8 checks passed
@renovate renovate bot deleted the renovate/step-security-harden-runner-2.x branch June 14, 2025 21:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant