|
17 | 17 | platform: [ 'x86_64-unknown-linux-gnu', 'aarch64-unknown-linux-gnu' ]
|
18 | 18 | steps:
|
19 | 19 | - name: Harden Runner
|
20 |
| - uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 |
| 20 | + uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 |
21 | 21 | with:
|
22 | 22 | egress-policy: block
|
23 | 23 | allowed-endpoints: >
|
|
67 | 67 | python-version: ['3.8', '3.9', '3.10', '3.11', '3.12']
|
68 | 68 | steps:
|
69 | 69 | - name: Harden Runner
|
70 |
| - uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 |
| 70 | + uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 |
71 | 71 | with:
|
72 | 72 | egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
|
73 | 73 |
|
|
97 | 97 | target: ['universal2', 'x86_64-apple-darwin']
|
98 | 98 | steps:
|
99 | 99 | - name: Harden Runner
|
100 |
| - uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 |
| 100 | + uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 |
101 | 101 | with:
|
102 | 102 | egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
|
103 | 103 |
|
@@ -128,7 +128,7 @@ jobs:
|
128 | 128 | contents: write # To add assets to a release.
|
129 | 129 | steps:
|
130 | 130 | - name: Harden Runner
|
131 |
| - uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.1.0 |
| 131 | + uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.1.0 |
132 | 132 | with:
|
133 | 133 | disable-sudo: true
|
134 | 134 | egress-policy: block
|
@@ -171,7 +171,7 @@ jobs:
|
171 | 171 | id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
|
172 | 172 | steps:
|
173 | 173 | - name: Harden Runner
|
174 |
| - uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 |
| 174 | + uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 |
175 | 175 | with:
|
176 | 176 | egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
|
177 | 177 |
|
|
0 commit comments