Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 15, 2025

Bumps step-security/harden-runner from 2.12.0 to 2.12.1.

Release notes

Sourced from step-security/harden-runner's releases.

v2.12.1

What's Changed

  • Detection capabilities have been upgraded to better recognize attempts at runner tampering. These improvements are informed by real-world incident learnings, including analysis of anomalous behaviors observed in the tj-actions and reviewdog supply chain attack.
  • Resolved an issue where the block policy was not enforced correctly when the GitHub Actions job was running inside a container on a self-hosted VM runner.

Full Changelog: step-security/harden-runner@v2...v2.12.1

Commits
  • 002fdce Merge pull request #544 from step-security/rc-21
  • 2489e3f Merge branch 'main' into rc-21
  • 75dd441 Merge pull request #555 from step-security/dependabot/github_actions/step-sec...
  • 4381ace Bump step-security/publish-unit-test-result-action from 2.19.0 to 2.20.0
  • a9da90b Merge pull request #553 from h0x0er/feat/container-workflows
  • a60ef21 update
  • 4ad512f Merge branch 'rc-21' into feat/container-workflows
  • 6b41a39 fixed test case
  • fa70c45 update agent
  • eb47845 self-hosted: refactored block-policy apply logic
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.12.0 to 2.12.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@0634a26...002fdce)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 15, 2025
@github-actions
Copy link

github-actions bot commented Jun 15, 2025

Test Results

  7 files  +  1   53 suites  +41   4m 43s ⏱️ + 4m 31s
185 tests +137  168 ✅ +120  17 💤 +17  0 ❌ ±0 
692 runs  +548  624 ✅ +480  68 💤 +68  0 ❌ ±0 

Results for commit 050c16b. ± Comparison against base commit 592bbaf.

This pull request removes 48 and adds 185 tests. Note that renamed tests count towards both.
PackChkIntegTests ‑ AddRefPacks
PackChkIntegTests ‑ CheckAllowSuppressError
PackChkIntegTests ‑ CheckBoardMountedCompatibleDevices
PackChkIntegTests ‑ CheckBoardMountedCompatibleDevices2
PackChkIntegTests ‑ CheckCompResolvedByItself
PackChkIntegTests ‑ CheckComponentDependency
PackChkIntegTests ‑ CheckConcurrentComponentFiles
PackChkIntegTests ‑ CheckConditionComponentDependency_Neg
PackChkIntegTests ‑ CheckConditionComponentDependency_Pos
PackChkIntegTests ‑ CheckConfigFileInIncludePath
…
AuxCmdTests ‑ MkdirCmdTest
AuxCmdTests ‑ RmdirCmdTest
AuxCmdTests ‑ TouchCmdTest
BuildSystemGeneratorTests ‑ GenAuditFile
BuildSystemGeneratorTests ‑ GenAuditFile_WithOut_Existing_Audit_File
BuildSystemGeneratorTests ‑ GenAuditFile_With_Existing_Audit_File
BuildSystemGeneratorTests ‑ GetString
BuildSystemGeneratorTests ‑ StrConv
BuildSystemGeneratorTests ‑ StrNorm
CBuildGCCTests ‑ Asm
…

♻️ This comment has been updated with latest results.

@soumeh01 soumeh01 merged commit 9907a2d into main Jun 16, 2025
109 checks passed
@soumeh01 soumeh01 deleted the dependabot/github_actions/step-security/harden-runner-2.12.1 branch June 16, 2025 07:21
@codecov
Copy link

codecov bot commented Jun 16, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 65.54%. Comparing base (592bbaf) to head (050c16b).
Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #2116   +/-   ##
=======================================
  Coverage   65.54%   65.54%           
=======================================
  Files         181      181           
  Lines       36982    36982           
  Branches    21497    21497           
=======================================
  Hits        24241    24241           
- Misses       8352     8354    +2     
+ Partials     4389     4387    -2     
Flag Coverage Δ
buildmgr-cov 73.95% <ø> (ø)
packchk-cov 70.18% <ø> (ø)
packgen-cov 77.87% <ø> (ø)
projmgr-cov 79.51% <ø> (ø)
svdconv-cov 40.75% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

see 5 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants