Bump step-security/harden-runner from 2.7.1 to 2.8.0 #193

	# Example taken from https://docs.github.com/en/actions/using-workflows/caching-dependencies-to-speed-up-workflows#managing-caches
	name: Cleanup Caches on PR Merge
	on:
	pull_request:
	types:
	- closed

	permissions:
	contents: read

	jobs:
	cleanup:
	runs-on: ubuntu-latest
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0
	with:
	disable-sudo: true
	egress-policy: block
	allowed-endpoints: >
	api.github.com:443
	github.com:443
	objects.githubusercontent.com:443

	- name: Check out code
	uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5

	- name: Cleanup
	run: \|
	gh extension install actions/gh-actions-cache

	REPO=${{ github.repository }}
	BRANCH="refs/pull/${{ github.event.pull_request.number }}/merge"

	echo "Fetching list of cache key"
	cacheKeysForPR=$(gh actions-cache list -R $REPO -B $BRANCH -L 100 \| cut -f 1 )

	## Setting this to not fail the workflow while deleting cache keys.
	set +e
	echo "Deleting caches..."
	for cacheKey in $cacheKeysForPR
	do
	gh actions-cache delete $cacheKey -R $REPO -B $BRANCH --confirm
	done
	echo "Done"
	env:
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback