File tree Expand file tree Collapse file tree 1 file changed +16
-0
lines changed Expand file tree Collapse file tree 1 file changed +16
-0
lines changed Original file line number Diff line number Diff line change 17
17
npm_version : ${{ steps.npm_version_output.outputs.NPM_VERSION }}
18
18
npm_tag : ${{ steps.npm_version_output.outputs.NPM_TAG }}
19
19
steps :
20
+ - name : Harden the runner (Audit all outbound calls)
21
+ uses : step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
22
+ with :
23
+ egress-policy : audit
20
24
- uses : maxim-lobanov/setup-xcode@60606e260d2fc5762a71e64e74b2174e8ea3c8bd # v1.6.0
21
25
with :
22
26
xcode-version : ${{env.XCODE_VERSION}}
82
86
runs-on : macos-14
83
87
needs : build
84
88
steps :
89
+ - name : Harden the runner (Audit all outbound calls)
90
+ uses : step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
91
+ with :
92
+ egress-policy : audit
85
93
- uses : maxim-lobanov/setup-xcode@60606e260d2fc5762a71e64e74b2174e8ea3c8bd # v1.6.0
86
94
with :
87
95
xcode-version : ${{env.XCODE_VERSION}}
@@ -152,6 +160,10 @@ jobs:
152
160
NPM_VERSION : ${{needs.build.outputs.npm_version}}
153
161
NPM_TAG : ${{needs.build.outputs.npm_tag}}
154
162
steps :
163
+ - name : Harden the runner (Audit all outbound calls)
164
+ uses : step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
165
+ with :
166
+ egress-policy : audit
155
167
- uses : actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3.9.1
156
168
with :
157
169
node-version : 20
@@ -178,6 +190,10 @@ jobs:
178
190
env :
179
191
NPM_VERSION : ${{needs.build.outputs.npm_version}}
180
192
steps :
193
+ - name : Harden the runner (Audit all outbound calls)
194
+ uses : step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
195
+ with :
196
+ egress-policy : audit
181
197
- uses : actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
182
198
with :
183
199
fetch-depth : 0
You can’t perform that action at this time.
0 commit comments