Merge branch 'main' into bug/check-race

ossf · Mar 15, 2023 · ef74ee4 · ef74ee4
2 parents d19b0b8 + c20ed9e
commit ef74ee4
Show file tree

Hide file tree

Showing 8 changed files with 34 additions and 41 deletions.
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
@@ -52,7 +52,7 @@ jobs:
 
     steps:
     - name: Harden Runner
-      uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+      uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
       with:
         egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 

diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
@@ -59,7 +59,7 @@ jobs:
     if: (needs.docs_only_check.outputs.docs_only != 'true')
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -107,7 +107,7 @@ jobs:
     if: (needs.docs_only_check.outputs.docs_only != 'true')
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -155,7 +155,7 @@ jobs:
     if: (needs.docs_only_check.outputs.docs_only != 'true')
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -203,7 +203,7 @@ jobs:
     if: (needs.docs_only_check.outputs.docs_only != 'true')
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -251,7 +251,7 @@ jobs:
     if: (needs.docs_only_check.outputs.docs_only != 'true')
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -299,7 +299,7 @@ jobs:
     if: (needs.docs_only_check.outputs.docs_only != 'true')
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -347,7 +347,7 @@ jobs:
     if: (needs.docs_only_check.outputs.docs_only != 'true')
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 

diff --git a/.github/workflows/goreleaser.yaml b/.github/workflows/goreleaser.yaml
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
         with:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -47,12 +47,6 @@ jobs:
       - name: Configure ldflags
         id: ldflags
         run: echo "version_flags=$(./scripts/version-ldflags)" >> "$GITHUB_OUTPUT"
-      - name: Import GPG key
-        id: import_gpg
-        uses: crazy-max/ghaction-import-gpg@111c56156bcc6918c056dbef52164cfa583dc549 # v5.2.0
-        with:
-          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
-          passphrase: ${{ secrets.PASSPHRASE }}
       - name: Run GoReleaser
         id: run-goreleaser
         uses: goreleaser/goreleaser-action@8f67e590f2d095516493f017008adc464e63adb1 # v2.5.0
@@ -61,7 +55,6 @@ jobs:
           args: release --rm-dist
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }}
           VERSION_LDFLAGS: ${{ steps.ldflags.outputs.version_flags }}
       - name: Generate subject
         id: hash

diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
         with:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -37,7 +37,7 @@ jobs:
     needs: [approve]
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
         with:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -37,7 +37,7 @@ jobs:
       contents: read
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -77,7 +77,7 @@ jobs:
       contents: read
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -125,7 +125,7 @@ jobs:
       contents: read
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -172,7 +172,7 @@ jobs:
       contents: read
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -208,7 +208,7 @@ jobs:
       contents: read
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -256,7 +256,7 @@ jobs:
       contents: read
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -304,7 +304,7 @@ jobs:
       contents: read
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -352,7 +352,7 @@ jobs:
       contents: read
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -400,7 +400,7 @@ jobs:
       contents: read
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -448,7 +448,7 @@ jobs:
       contents: read
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -496,7 +496,7 @@ jobs:
       contents: read
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -544,7 +544,7 @@ jobs:
       contents: read
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -592,7 +592,7 @@ jobs:
       contents: read
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -640,7 +640,7 @@ jobs:
       contents: read
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -688,7 +688,7 @@ jobs:
       contents: read
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -735,7 +735,7 @@ jobs:
       contents: read
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -765,7 +765,7 @@ jobs:
       contents: read
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -808,7 +808,7 @@ jobs:
       contents: read
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
      - name: Install Protoc
@@ -854,7 +854,7 @@ jobs:
       contents: read
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
@@ -889,7 +889,7 @@ jobs:
       contents: read
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
         with:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 

diff --git a/.github/workflows/publishimage.yml b/.github/workflows/publishimage.yml
@@ -35,7 +35,7 @@ jobs:
       COSIGN_EXPERIMENTAL: "true"
     steps:
      - name: Harden Runner
-       uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57
+       uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
        with:
          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 

diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Harden Runner
-      uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+      uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
       with:
         egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 

diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
@@ -26,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Harden Runner
-      uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 # v1
+      uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776 # v1
       with:
         egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs