Skip to content

Commit

Permalink
chore(deps): update step-security/harden-runner action to v2.7.1 (#223)
Browse files Browse the repository at this point in the history
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[step-security/harden-runner](https://github.com/step-security/harden-runner)
| action | patch | `v2.7.0` -> `v2.7.1` |

---

### Release Notes

<details>
<summary>step-security/harden-runner
(step-security/harden-runner)</summary>

###
[`v2.7.1`](https://github.com/step-security/harden-runner/releases/tag/v2.7.1)

[Compare
Source](https://github.com/step-security/harden-runner/compare/v2.7.0...v2.7.1)

##### What's Changed

Release v2.7.1 by
[@&#8203;varunsh-coder](https://github.com/varunsh-coder),
[@&#8203;h0x0er](https://github.com/h0x0er),
[@&#8203;ashishkurmi](https://github.com/ashishkurmi) in
[step-security/harden-runner#397
This release:

- Improves the capability to [inspect outbound HTTPS
traffic](https://www.stepsecurity.io/blog/monitor-outbound-https-requests-from-github-actions-runners)
on GitHub-hosted and self-hosted VM runners
- Updates README to add link to [case study
video](https://www.youtube.com/watch?v=Yz72qAOrN9s) on how Harden-Runner
detected a supply chain attack on a Google open-source project
-   Addresses minor bugs

**Full Changelog**:
step-security/harden-runner@v2.7.0...v2.7.1

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/Tuhura-Tech/wiki).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMjEuMiIsInVwZGF0ZWRJblZlciI6IjM3LjM2My41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
  • Loading branch information
renovate[bot] committed May 19, 2024
1 parent 37e88d4 commit 2f87830
Show file tree
Hide file tree
Showing 3 changed files with 3 additions and 3 deletions.
2 changes: 1 addition & 1 deletion .github/workflows/lint-pr.yml
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Harden Runner
uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
with:
disable-sudo: true
disable-file-monitoring: true
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/scoreboard-security.yml
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ jobs:

steps:
- name: Harden Runner
uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
with:
disable-sudo: true
egress-policy: block
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/trufflehog.yml
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Harden Runner
uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
with:
disable-sudo: true
egress-policy: audit
Expand Down

0 comments on commit 2f87830

Please sign in to comment.