Skip to content

Commit 8bfd748

Browse files
committed
Update workflows
Bump harden-runner commit Add allowed domains
1 parent ba6406d commit 8bfd748

File tree

5 files changed

+15
-5
lines changed

5 files changed

+15
-5
lines changed

.github/workflows/codeql-analysis.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ jobs:
3737
# Learn more about CodeQL language support at https://git.io/codeql-language-support
3838

3939
steps:
40-
- uses: step-security/harden-runner@7206db2ec98c5538323a6d70e51f965d55c11c87
40+
- uses: step-security/harden-runner@917f7d59f22e82a5ddcaef409923426fd7aa6327
4141
- name: Checkout repository
4242
uses: actions/checkout@629c2de402a417ea7690ca6ce3f33229e27606a5
4343

.github/workflows/int.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
contents: read
1414
runs-on: ubuntu-latest
1515
steps:
16-
- uses: step-security/harden-runner@7206db2ec98c5538323a6d70e51f965d55c11c87
16+
- uses: step-security/harden-runner@917f7d59f22e82a5ddcaef409923426fd7aa6327
1717
with:
1818
allowed-endpoints:
1919
api.github.com:443

.github/workflows/release.yml

Lines changed: 11 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,17 @@ jobs:
1313
contents: write
1414
runs-on: ubuntu-latest
1515
steps:
16-
- uses: step-security/harden-runner@7206db2ec98c5538323a6d70e51f965d55c11c87
16+
- uses: step-security/harden-runner@917f7d59f22e82a5ddcaef409923426fd7aa6327
17+
with:
18+
allowed-endpoints:
19+
agent.api.stepsecurity.io:443
20+
api.github.com:443
21+
github.com:443
22+
goreleaser.com:443
23+
objects.githubusercontent.com:443
24+
proxy.golang.org:443
25+
storage.googleapis.com:443
26+
uploads.github.com:443
1727
- name: Checkout
1828
uses: actions/checkout@629c2de402a417ea7690ca6ce3f33229e27606a5
1929
- name: Set up Go

.github/workflows/scorecard-analysis.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
security-events: write
1919

2020
steps:
21-
- uses: step-security/harden-runner@7206db2ec98c5538323a6d70e51f965d55c11c87
21+
- uses: step-security/harden-runner@917f7d59f22e82a5ddcaef409923426fd7aa6327
2222
- name: "Checkout code"
2323
uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579
2424

.github/workflows/test.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ jobs:
1010
contents: read
1111
runs-on: ubuntu-latest
1212
steps:
13-
- uses: step-security/harden-runner@7206db2ec98c5538323a6d70e51f965d55c11c87
13+
- uses: step-security/harden-runner@917f7d59f22e82a5ddcaef409923426fd7aa6327
1414
with:
1515
allowed-endpoints:
1616
beta.api.stepsecurity.io:443

0 commit comments

Comments
 (0)