|
17 | 17 | platform: [ 'x86_64-unknown-linux-gnu', 'aarch64-unknown-linux-gnu' ] |
18 | 18 | steps: |
19 | 19 | - name: Harden Runner |
20 | | - uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 |
| 20 | + uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 |
21 | 21 | with: |
22 | 22 | egress-policy: block |
23 | 23 | allowed-endpoints: > |
|
67 | 67 | python-version: ['3.8', '3.9', '3.10', '3.11', '3.12'] |
68 | 68 | steps: |
69 | 69 | - name: Harden Runner |
70 | | - uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 |
| 70 | + uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 |
71 | 71 | with: |
72 | 72 | egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs |
73 | 73 |
|
|
97 | 97 | target: ['universal2', 'x86_64-apple-darwin'] |
98 | 98 | steps: |
99 | 99 | - name: Harden Runner |
100 | | - uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 |
| 100 | + uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 |
101 | 101 | with: |
102 | 102 | egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs |
103 | 103 |
|
@@ -128,7 +128,7 @@ jobs: |
128 | 128 | contents: write # To add assets to a release. |
129 | 129 | steps: |
130 | 130 | - name: Harden Runner |
131 | | - uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.1.0 |
| 131 | + uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.1.0 |
132 | 132 | with: |
133 | 133 | disable-sudo: true |
134 | 134 | egress-policy: block |
@@ -171,7 +171,7 @@ jobs: |
171 | 171 | id-token: write # IMPORTANT: this permission is mandatory for trusted publishing |
172 | 172 | steps: |
173 | 173 | - name: Harden Runner |
174 | | - uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 |
| 174 | + uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 |
175 | 175 | with: |
176 | 176 | egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs |
177 | 177 |
|
|
0 commit comments