Skip to content

chore(deps): update step-security/harden-runner action to v2.12.1 #46

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jun 15, 2025

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 1, 2025

This PR contains the following updates:

Package Type Update Change
step-security/harden-runner action minor v2.11.0 -> v2.12.1

Release Notes

step-security/harden-runner (step-security/harden-runner)

v2.12.1

Compare Source

What's Changed
  • Detection capabilities have been upgraded to better recognize attempts at runner tampering. These improvements are informed by real-world incident learnings, including analysis of anomalous behaviors observed in the tj-actions and reviewdog supply chain attack.
  • Resolved an issue where the block policy was not enforced correctly when the GitHub Actions job was running inside a container on a self-hosted VM runner.

Full Changelog: step-security/harden-runner@v2...v2.12.1

v2.12.0

Compare Source

What's Changed
  1. A new option, disable-sudo-and-containers, is now available to replace the disable-sudo policy, addressing Docker-based privilege escalation (CVE-2025-32955). More details can be found in this blog post.

  2. New detections have been added based on insights from the tj-actions and reviewdog actions incidents.

Full Changelog: step-security/harden-runner@v2...v2.12.0

v2.11.1

Compare Source

What's Changed

Full Changelog: step-security/harden-runner@v2...v2.11.1


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link

codecov bot commented Apr 1, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 86.66%. Comparing base (87a0d0e) to head (2024c7e).
Report is 5 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master      #46   +/-   ##
=======================================
  Coverage   86.66%   86.66%           
=======================================
  Files           5        5           
  Lines         270      270           
  Branches       53       53           
=======================================
  Hits          234      234           
  Misses          1        1           
  Partials       35       35           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Copy link

github-actions bot commented Apr 1, 2025

Test Results

  5 files    5 suites   1m 2s ⏱️
 71 tests  71 ✅ 0 💤 0 ❌
355 runs  355 ✅ 0 💤 0 ❌

Results for commit 2024c7e.

♻️ This comment has been updated with latest results.

@renovate renovate bot force-pushed the renovate/step-security-harden-runner-2.x branch from 08a85a8 to 055ca35 Compare April 21, 2025 19:44
@renovate renovate bot changed the title chore(deps): update step-security/harden-runner action to v2.11.1 chore(deps): update step-security/harden-runner action to v2.12.0 Apr 21, 2025
Copy link

@renovate renovate bot force-pushed the renovate/step-security-harden-runner-2.x branch from 055ca35 to 2024c7e Compare June 11, 2025 18:02
@renovate renovate bot changed the title chore(deps): update step-security/harden-runner action to v2.12.0 chore(deps): update step-security/harden-runner action to v2.12.1 Jun 11, 2025
Copy link

@sjinks sjinks merged commit 70ad7f5 into master Jun 15, 2025
31 checks passed
@sjinks sjinks deleted the renovate/step-security-harden-runner-2.x branch June 15, 2025 01:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant