diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index f2bc5d2..cdd3876 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -28,7 +28,7 @@ jobs: - 'go' steps: - name: 'Harden Runner' - uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 + uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 with: egress-policy: 'audit' - name: 'Checkout' diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 9dcae50..8afb83f 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -14,7 +14,7 @@ jobs: runs-on: 'ubuntu-latest' steps: - name: 'Harden Runner' - uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 + uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 with: egress-policy: 'audit' - name: 'Checkout Repository' diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml index 4d35257..15ad72a 100644 --- a/.github/workflows/go.yml +++ b/.github/workflows/go.yml @@ -17,7 +17,7 @@ jobs: runs-on: 'ubuntu-latest' steps: - name: 'Harden Runner' - uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 + uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 with: egress-policy: 'audit' - name: 'Set up Go' @@ -47,7 +47,7 @@ jobs: fail-fast: false steps: - name: 'Harden Runner' - uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 + uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 with: egress-policy: 'audit' - name: 'Set up Go ${{ matrix.go }}' diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 384304d..a406acd 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -18,7 +18,7 @@ jobs: actions: 'read' steps: - name: 'Harden Runner' - uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 + uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 with: egress-policy: 'audit' - name: 'Checkout'