From d9440a160421ea5c97d0aa3201c0cd04ffa21b04 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 6 Aug 2024 06:49:07 +0000 Subject: [PATCH] chore(deps): bump step-security/harden-runner from 2.8.1 to 2.9.1 Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.8.1 to 2.9.1. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6...5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/00_pr_auto_approve.yml | 2 +- .github/workflows/build_images_containers.yml | 2 +- .github/workflows/codeql.yml | 2 +- .github/workflows/dependency-review.yml | 2 +- .github/workflows/dffml_build_images_containers.yml | 2 +- .github/workflows/dispatch_build_images_containers.yml | 2 +- .github/workflows/new_2nd_party_tcb_eval.yml | 2 +- .github/workflows/pin_downstream.yml | 4 ++-- .github/workflows/scorecard.yml | 2 +- 9 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/00_pr_auto_approve.yml b/.github/workflows/00_pr_auto_approve.yml index ee11a2b3cc..25a272a2f6 100644 --- a/.github/workflows/00_pr_auto_approve.yml +++ b/.github/workflows/00_pr_auto_approve.yml @@ -38,7 +38,7 @@ jobs: - uses: actions/checkout@v4 - name: Harden Runner - uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1 + uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 with: egress-policy: audit diff --git a/.github/workflows/build_images_containers.yml b/.github/workflows/build_images_containers.yml index a28ad9f40f..191a02cf43 100644 --- a/.github/workflows/build_images_containers.yml +++ b/.github/workflows/build_images_containers.yml @@ -67,7 +67,7 @@ jobs: matrix: ${{ fromJSON(inputs.manifests) }} steps: - name: Harden Runner - uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1 + uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 with: egress-policy: audit diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index dd4c05a34c..2c238f31ee 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -42,7 +42,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1 + uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 with: egress-policy: audit diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 1792f0181c..2ef1a196d7 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1 + uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 with: egress-policy: audit diff --git a/.github/workflows/dffml_build_images_containers.yml b/.github/workflows/dffml_build_images_containers.yml index c201fa153c..5aef359068 100644 --- a/.github/workflows/dffml_build_images_containers.yml +++ b/.github/workflows/dffml_build_images_containers.yml @@ -36,7 +36,7 @@ jobs: manifest: ${{ steps.create-manifest-instance.outputs.github_actions_manifest }} steps: - name: Harden Runner - uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1 + uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 with: egress-policy: audit diff --git a/.github/workflows/dispatch_build_images_containers.yml b/.github/workflows/dispatch_build_images_containers.yml index 18c59a6662..322eec6199 100644 --- a/.github/workflows/dispatch_build_images_containers.yml +++ b/.github/workflows/dispatch_build_images_containers.yml @@ -21,7 +21,7 @@ jobs: manifest: ${{ steps.create-manifest-instance.outputs.manifest }} steps: - name: Harden Runner - uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1 + uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 with: egress-policy: audit diff --git a/.github/workflows/new_2nd_party_tcb_eval.yml b/.github/workflows/new_2nd_party_tcb_eval.yml index 68c17a3d31..a53ff69345 100644 --- a/.github/workflows/new_2nd_party_tcb_eval.yml +++ b/.github/workflows/new_2nd_party_tcb_eval.yml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1 + uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 with: egress-policy: audit diff --git a/.github/workflows/pin_downstream.yml b/.github/workflows/pin_downstream.yml index f49465f2a7..40f11756d7 100644 --- a/.github/workflows/pin_downstream.yml +++ b/.github/workflows/pin_downstream.yml @@ -29,7 +29,7 @@ jobs: manifest: ${{ steps.create-manifest-instance.outputs.github_actions_manifest }} steps: - name: Harden Runner - uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1 + uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 with: egress-policy: audit @@ -99,7 +99,7 @@ jobs: matrix: ${{ fromJSON(needs.manifest.outputs.manifest) }} steps: - name: Harden Runner - uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1 + uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 with: egress-policy: audit diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 3ad65000a4..d9d7067638 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -20,7 +20,7 @@ jobs: id-token: write steps: - name: Harden Runner - uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1 + uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 with: egress-policy: audit