From 354693b658cd03d7355f7d93265cab0109d13675 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 21 Feb 2023 07:41:28 -0800 Subject: [PATCH] Bump step-security/harden-runner from 2.1.0 to 2.2.0 (#873) Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.1.0 to 2.2.0. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/18bf8ad2ca49c14cbb28b91346d626ccfb00c518...c8454efe5d0bdefd25384362fe217428ca277d57) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/analysis.yml | 2 +- .github/workflows/benchmarks.yml | 2 +- .github/workflows/build.yml | 10 +++++----- .github/workflows/codacy.yml | 2 +- .github/workflows/codeql.yml | 2 +- .github/workflows/dependency-check.yml | 2 +- .github/workflows/dependency-review.yml | 2 +- .github/workflows/dependency-submission.yml | 2 +- .github/workflows/devskim.yml | 2 +- .github/workflows/examples.yml | 2 +- .github/workflows/gradle-wrapper-validation.yml | 2 +- .github/workflows/qodana.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/semgrep.yml | 2 +- .github/workflows/snyk.yml | 2 +- .github/workflows/spelling.yml | 2 +- 16 files changed, 20 insertions(+), 20 deletions(-) diff --git a/.github/workflows/analysis.yml b/.github/workflows/analysis.yml index 2836f0a763..9e917aceee 100644 --- a/.github/workflows/analysis.yml +++ b/.github/workflows/analysis.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: disable-sudo: true egress-policy: audit diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml index 6b808cdccc..d3d382046b 100644 --- a/.github/workflows/benchmarks.yml +++ b/.github/workflows/benchmarks.yml @@ -17,7 +17,7 @@ jobs: JAVA_VERSION: ${{ matrix.java }} steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: disable-sudo: true egress-policy: audit diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index a6a96995e8..8c111d295b 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -46,7 +46,7 @@ jobs: JAVA_VERSION: ${{ matrix.java }} steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: disable-sudo: true egress-policy: block @@ -134,7 +134,7 @@ jobs: JAVA_VERSION: ${{ matrix.java }} steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: disable-sudo: true egress-policy: block @@ -177,7 +177,7 @@ jobs: if: github.event_name == 'push' steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: disable-sudo: true egress-policy: block @@ -243,7 +243,7 @@ jobs: checks: write steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: disable-sudo: true egress-policy: block @@ -293,7 +293,7 @@ jobs: && endsWith(github.ref, github.event.repository.default_branch) steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: disable-sudo: true egress-policy: block diff --git a/.github/workflows/codacy.yml b/.github/workflows/codacy.yml index 3a1859dc76..537ce6b452 100644 --- a/.github/workflows/codacy.yml +++ b/.github/workflows/codacy.yml @@ -11,7 +11,7 @@ jobs: security-events: write steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: disable-sudo: true egress-policy: audit diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index b7dbbf8dec..2b4a649740 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -31,7 +31,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: egress-policy: audit - name: Checkout repository diff --git a/.github/workflows/dependency-check.yml b/.github/workflows/dependency-check.yml index ff7af54eab..b15f07c24f 100644 --- a/.github/workflows/dependency-check.yml +++ b/.github/workflows/dependency-check.yml @@ -20,7 +20,7 @@ jobs: security-events: write steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: disable-sudo: true egress-policy: audit diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 10a0ec642c..ecc8160013 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -9,7 +9,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: disable-sudo: true egress-policy: audit diff --git a/.github/workflows/dependency-submission.yml b/.github/workflows/dependency-submission.yml index 09991c9442..767551461d 100644 --- a/.github/workflows/dependency-submission.yml +++ b/.github/workflows/dependency-submission.yml @@ -16,7 +16,7 @@ jobs: contents: write steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: disable-sudo: true egress-policy: audit diff --git a/.github/workflows/devskim.yml b/.github/workflows/devskim.yml index 7723a1e5f5..a199ee6623 100644 --- a/.github/workflows/devskim.yml +++ b/.github/workflows/devskim.yml @@ -19,7 +19,7 @@ jobs: security-events: write steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: disable-sudo: true egress-policy: audit diff --git a/.github/workflows/examples.yml b/.github/workflows/examples.yml index dcd7bbc8b5..6be701032a 100644 --- a/.github/workflows/examples.yml +++ b/.github/workflows/examples.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: disable-sudo: true egress-policy: audit diff --git a/.github/workflows/gradle-wrapper-validation.yml b/.github/workflows/gradle-wrapper-validation.yml index d0506b3755..6fd4e7b2c6 100644 --- a/.github/workflows/gradle-wrapper-validation.yml +++ b/.github/workflows/gradle-wrapper-validation.yml @@ -8,7 +8,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: disable-sudo: true egress-policy: audit diff --git a/.github/workflows/qodana.yml b/.github/workflows/qodana.yml index 1fac0498b5..a96eafe0d9 100644 --- a/.github/workflows/qodana.yml +++ b/.github/workflows/qodana.yml @@ -16,7 +16,7 @@ jobs: security-events: write steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: disable-sudo: true egress-policy: audit diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 97914d23c4..7dbe4e7f20 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: disable-sudo: true egress-policy: audit diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index 6799eac1a2..3e00f00eba 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -17,7 +17,7 @@ jobs: image: returntocorp/semgrep steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: disable-sudo: true egress-policy: audit diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml index fec88acfa5..9aaa40c17b 100644 --- a/.github/workflows/snyk.yml +++ b/.github/workflows/snyk.yml @@ -20,7 +20,7 @@ jobs: SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: disable-sudo: true egress-policy: audit diff --git a/.github/workflows/spelling.yml b/.github/workflows/spelling.yml index 75da8fe30b..2bb2b295be 100644 --- a/.github/workflows/spelling.yml +++ b/.github/workflows/spelling.yml @@ -8,7 +8,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 + uses: step-security/harden-runner@c8454efe5d0bdefd25384362fe217428ca277d57 with: disable-sudo: true egress-policy: audit