Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 2, 2026

This PR contains the following updates:

Package Type Update Change OpenSSF
step-security/harden-runner action minor v2.13.3v2.14.0 OpenSSF Scorecard

Release Notes

step-security/harden-runner (step-security/harden-runner)

v2.14.0

Compare Source

What's Changed
  • Selective installation: Harden-Runner now skips installation on GitHub-hosted runners when the repository has a custom property skip_harden_runner, allowing organizations to opt out specific repos.
  • Avoid double install: The action no longer installs Harden-Runner if it’s already present on a GitHub-hosted runner, which could happen when a composite action also installs it.

Full Changelog: step-security/harden-runner@v2.13.3...v2.14.0


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@skarllot skarllot merged commit ad990e2 into main Jan 2, 2026
5 checks passed
@skarllot skarllot deleted the renovate/step-security-harden-runner-2.x branch January 2, 2026 11:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants