Bump step-security/harden-runner from 2.13.1 to 2.13.3 #704

	# Copyright 2022 Chainguard, Inc.
	# SPDX-License-Identifier: Apache-2.0

	name: Boilerplate

	on:
	pull_request:
	branches:
	- 'main'

	permissions: {}

	jobs:

	check:
	name: Boilerplate Check
	runs-on: ubuntu-latest

	permissions:
	contents: read

	strategy:
	fail-fast: false # Keep running if one leg fails.
	matrix:
	extension:
	- go
	- sh
	- yaml

	# Map between extension and human-readable name.
	include:
	- extension: go
	language: Go
	- extension: sh
	language: Bash
	- extension: yaml
	language: YAML

	steps:
	- name: Harden the runner (Audit all outbound calls)
	uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3
	with:
	egress-policy: audit

	- name: Check out code
	uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

	- uses: chainguard-dev/actions/boilerplate@cd899cc96227b82170571cad1c3d6378d8cba678 # v1.4.15
	with:
	extension: ${{ matrix.extension }}
	language: ${{ matrix.language }}

Provide feedback