diff --git a/.github/workflows/ci-build-windows.yaml b/.github/workflows/ci-build-windows.yaml index c2cd22a8..a4bb2f33 100644 --- a/.github/workflows/ci-build-windows.yaml +++ b/.github/workflows/ci-build-windows.yaml @@ -27,7 +27,7 @@ jobs: go-version: '1.22.3' - name: Harden Runner - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f + uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/ci-build.yaml b/.github/workflows/ci-build.yaml index 377be133..797c8310 100644 --- a/.github/workflows/ci-build.yaml +++ b/.github/workflows/ci-build.yaml @@ -27,7 +27,7 @@ jobs: go-version: '1.22.3' - name: Harden Runner - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f + uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml index 01386453..4acc3089 100644 --- a/.github/workflows/codeql.yaml +++ b/.github/workflows/codeql.yaml @@ -34,7 +34,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f + uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs