diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 27ea50ba98..9285be5631 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -28,7 +28,7 @@ jobs: should_skip: ${{ steps.skip_check.outputs.should_skip }} steps: - name: Harden Runner - uses: step-security/harden-runner@951b48540b429070694bc8abd82fd6901eb123ca + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/changelog_pr.yaml b/.github/workflows/changelog_pr.yaml index 26b2317d36..c42ce81433 100644 --- a/.github/workflows/changelog_pr.yaml +++ b/.github/workflows/changelog_pr.yaml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Harden Runner - uses: step-security/harden-runner@951b48540b429070694bc8abd82fd6901eb123ca + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 5ef1b0ce6a..a763dda72e 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -46,7 +46,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@951b48540b429070694bc8abd82fd6901eb123ca + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/curldemo.yaml b/.github/workflows/curldemo.yaml index c8e73c3f66..6fd37620f3 100644 --- a/.github/workflows/curldemo.yaml +++ b/.github/workflows/curldemo.yaml @@ -17,7 +17,7 @@ jobs: DOCKER_CLI_EXPERIMENTAL: "enabled" steps: - name: Harden Runner - uses: step-security/harden-runner@951b48540b429070694bc8abd82fd6901eb123ca + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/fossa.yml b/.github/workflows/fossa.yml index 35e8a8dcc7..c12b729cce 100644 --- a/.github/workflows/fossa.yml +++ b/.github/workflows/fossa.yml @@ -24,7 +24,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@951b48540b429070694bc8abd82fd6901eb123ca + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/gh-pages.yaml b/.github/workflows/gh-pages.yaml index 50f8aa41d5..a902e4e610 100644 --- a/.github/workflows/gh-pages.yaml +++ b/.github/workflows/gh-pages.yaml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Harden Runner - uses: step-security/harden-runner@951b48540b429070694bc8abd82fd6901eb123ca + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/helm_check-values-schema.yaml b/.github/workflows/helm_check-values-schema.yaml index 927d1038b9..340be5fd04 100644 --- a/.github/workflows/helm_check-values-schema.yaml +++ b/.github/workflows/helm_check-values-schema.yaml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Harden Runner - uses: step-security/harden-runner@951b48540b429070694bc8abd82fd6901eb123ca + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/helm_docs.yaml b/.github/workflows/helm_docs.yaml index 9969e30bc5..655496afaa 100644 --- a/.github/workflows/helm_docs.yaml +++ b/.github/workflows/helm_docs.yaml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@951b48540b429070694bc8abd82fd6901eb123ca + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/helm_publish.yaml b/.github/workflows/helm_publish.yaml index 4594b5d857..2943c7920d 100644 --- a/.github/workflows/helm_publish.yaml +++ b/.github/workflows/helm_publish.yaml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Harden Runner - uses: step-security/harden-runner@951b48540b429070694bc8abd82fd6901eb123ca + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/kube-linter.yaml b/.github/workflows/kube-linter.yaml index 3f6636ecaf..60889be473 100644 --- a/.github/workflows/kube-linter.yaml +++ b/.github/workflows/kube-linter.yaml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@951b48540b429070694bc8abd82fd6901eb123ca + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/olm_pr.yaml b/.github/workflows/olm_pr.yaml index dd27f69fe7..d034624ada 100644 --- a/.github/workflows/olm_pr.yaml +++ b/.github/workflows/olm_pr.yaml @@ -28,7 +28,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Harden Runner - uses: step-security/harden-runner@951b48540b429070694bc8abd82fd6901eb123ca + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/terrascan.yaml b/.github/workflows/terrascan.yaml index b30729f871..0e96e15243 100644 --- a/.github/workflows/terrascan.yaml +++ b/.github/workflows/terrascan.yaml @@ -18,7 +18,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Harden Runner - uses: step-security/harden-runner@951b48540b429070694bc8abd82fd6901eb123ca + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/terratest.yaml b/.github/workflows/terratest.yaml index 59be3c50cf..d58fddf184 100644 --- a/.github/workflows/terratest.yaml +++ b/.github/workflows/terratest.yaml @@ -29,7 +29,7 @@ jobs: should_skip: ${{ steps.skip_check.outputs.should_skip }} steps: - name: Harden Runner - uses: step-security/harden-runner@951b48540b429070694bc8abd82fd6901eb123ca + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs diff --git a/.github/workflows/upgrade-testing.yaml b/.github/workflows/upgrade-testing.yaml index 16b292e7e7..0986be9a13 100644 --- a/.github/workflows/upgrade-testing.yaml +++ b/.github/workflows/upgrade-testing.yaml @@ -29,7 +29,7 @@ jobs: should_skip: ${{ steps.skip_check.outputs.should_skip }} steps: - name: Harden Runner - uses: step-security/harden-runner@951b48540b429070694bc8abd82fd6901eb123ca + uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs