diff --git a/.github/workflows/codecov.yml b/.github/workflows/codecov.yml index 593b303..51d8572 100644 --- a/.github/workflows/codecov.yml +++ b/.github/workflows/codecov.yml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b + uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc with: egress-policy: audit diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 54db422..2969faa 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -42,7 +42,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b + uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml index 7acfcdb..1a6fd34 100644 --- a/.github/workflows/go.yml +++ b/.github/workflows/go.yml @@ -12,7 +12,7 @@ jobs: runs-on: ${{ matrix.os }} steps: - name: Harden Runner - uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b + uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml index 028f952..eedf1bf 100644 --- a/.github/workflows/golangci-lint.yml +++ b/.github/workflows/golangci-lint.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b + uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/mysql.yml b/.github/workflows/mysql.yml index 937b5f1..aa2a749 100644 --- a/.github/workflows/mysql.yml +++ b/.github/workflows/mysql.yml @@ -24,7 +24,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b + uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc with: egress-policy: audit allowed-endpoints: > diff --git a/.github/workflows/pg.yml b/.github/workflows/pg.yml index e62b8e0..c060753 100644 --- a/.github/workflows/pg.yml +++ b/.github/workflows/pg.yml @@ -23,7 +23,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b + uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc with: egress-policy: audit allowed-endpoints: > diff --git a/.github/workflows/s2.yml b/.github/workflows/s2.yml index 8580311..d76d23b 100644 --- a/.github/workflows/s2.yml +++ b/.github/workflows/s2.yml @@ -23,7 +23,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b + uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs