From da85c4b9dfbf5a4b5677cf1611a160a21444a976 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 23 May 2024 07:28:22 -0700 Subject: [PATCH] --- (#2715) updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/digestabot.yaml | 2 +- .github/workflows/presubmit-build.yaml | 6 +++--- .github/workflows/presubmit-readme.yaml | 2 +- .github/workflows/release.yaml | 6 +++--- .github/workflows/withdraw-images.yaml | 2 +- .github/workflows/withdraw-repos.yaml | 2 +- 6 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/digestabot.yaml b/.github/workflows/digestabot.yaml index 4c980526a2..2c918be335 100644 --- a/.github/workflows/digestabot.yaml +++ b/.github/workflows/digestabot.yaml @@ -19,7 +19,7 @@ jobs: id-token: write # To gitsign and federate steps: - - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 + - uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0 with: egress-policy: audit diff --git a/.github/workflows/presubmit-build.yaml b/.github/workflows/presubmit-build.yaml index 2e1d3301e7..6652d3dbdf 100644 --- a/.github/workflows/presubmit-build.yaml +++ b/.github/workflows/presubmit-build.yaml @@ -20,7 +20,7 @@ jobs: shard: runs-on: ubuntu-latest steps: - - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 + - uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0 with: egress-policy: audit @@ -114,7 +114,7 @@ jobs: shard: ${{ fromJson(needs.shard.outputs.shard_matrix) }} steps: - - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 + - uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0 with: egress-policy: audit @@ -216,7 +216,7 @@ jobs: runs-on: ubuntu-latest if: always() steps: - - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 + - uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0 with: egress-policy: audit diff --git a/.github/workflows/presubmit-readme.yaml b/.github/workflows/presubmit-readme.yaml index f91bce4f23..09ed0cf37a 100644 --- a/.github/workflows/presubmit-readme.yaml +++ b/.github/workflows/presubmit-readme.yaml @@ -4,7 +4,7 @@ jobs: presubmit-readme: runs-on: ubuntu-latest steps: - - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 + - uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0 with: egress-policy: audit diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 6daaeda605..11c79a14be 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -29,7 +29,7 @@ jobs: shard: runs-on: ubuntu-latest steps: - - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 + - uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0 with: egress-policy: audit @@ -83,7 +83,7 @@ jobs: contents: read actions: read steps: - - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 + - uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0 with: egress-policy: audit @@ -174,7 +174,7 @@ jobs: needs: build steps: - - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 + - uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0 with: egress-policy: audit diff --git a/.github/workflows/withdraw-images.yaml b/.github/workflows/withdraw-images.yaml index 9589285444..55cea97ed1 100644 --- a/.github/workflows/withdraw-images.yaml +++ b/.github/workflows/withdraw-images.yaml @@ -16,7 +16,7 @@ jobs: id-token: write contents: read steps: - - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 + - uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0 with: egress-policy: audit diff --git a/.github/workflows/withdraw-repos.yaml b/.github/workflows/withdraw-repos.yaml index a9db87c611..06507d11aa 100644 --- a/.github/workflows/withdraw-repos.yaml +++ b/.github/workflows/withdraw-repos.yaml @@ -16,7 +16,7 @@ jobs: id-token: write contents: read steps: - - uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1 + - uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0 with: egress-policy: audit