From 6cf1b7ee4196d6be9675084d6c13e65b50cdd329 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 16 Jul 2026 10:35:12 +0000 Subject: [PATCH] CI(actions): Bump step-security/harden-runner from 2.19.4 to 2.20.0 Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.19.4 to 2.20.0. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/9af89fc71515a100421586dfdb3dc9c984fbf411...bf7454d06d71f1098171f2acdf0cd4708d7b5920) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/build-test-multiarch.yaml | 24 +++++------ .../build-test-release-multiarch.yaml | 40 +++++++++---------- .github/workflows/build-test-release.yaml | 36 ++++++++--------- .github/workflows/build-test.yaml | 24 +++++------ .github/workflows/clear-action-cache.yaml | 2 +- .github/workflows/release-drafter.yaml | 2 +- .github/workflows/tag-push.yaml | 4 +- 7 files changed, 66 insertions(+), 66 deletions(-) diff --git a/.github/workflows/build-test-multiarch.yaml b/.github/workflows/build-test-multiarch.yaml index f38f6f0..986cc2a 100644 --- a/.github/workflows/build-test-multiarch.yaml +++ b/.github/workflows/build-test-multiarch.yaml @@ -381,7 +381,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -389,7 +389,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -445,7 +445,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -453,7 +453,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -526,7 +526,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -534,7 +534,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -626,7 +626,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -634,7 +634,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -732,7 +732,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -740,7 +740,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -825,7 +825,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -833,7 +833,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' diff --git a/.github/workflows/build-test-release-multiarch.yaml b/.github/workflows/build-test-release-multiarch.yaml index f3a923d..04a58b9 100644 --- a/.github/workflows/build-test-release-multiarch.yaml +++ b/.github/workflows/build-test-release-multiarch.yaml @@ -401,7 +401,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -409,7 +409,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -464,7 +464,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -472,7 +472,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -557,7 +557,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -565,7 +565,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -640,7 +640,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -648,7 +648,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -745,7 +745,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -753,7 +753,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -851,7 +851,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -859,7 +859,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -940,7 +940,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -948,7 +948,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -1055,7 +1055,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -1063,7 +1063,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -1231,7 +1231,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -1239,7 +1239,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -1300,7 +1300,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -1308,7 +1308,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' diff --git a/.github/workflows/build-test-release.yaml b/.github/workflows/build-test-release.yaml index a0c83b1..d95e7be 100644 --- a/.github/workflows/build-test-release.yaml +++ b/.github/workflows/build-test-release.yaml @@ -343,7 +343,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -351,7 +351,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -406,7 +406,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -414,7 +414,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -504,7 +504,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -512,7 +512,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -578,7 +578,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -586,7 +586,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -655,7 +655,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -663,7 +663,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -717,7 +717,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -725,7 +725,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -801,7 +801,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -809,7 +809,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -971,7 +971,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -979,7 +979,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -1039,7 +1039,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -1047,7 +1047,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' diff --git a/.github/workflows/build-test.yaml b/.github/workflows/build-test.yaml index 88f198f..52d1511 100644 --- a/.github/workflows/build-test.yaml +++ b/.github/workflows/build-test.yaml @@ -324,7 +324,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -332,7 +332,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -389,7 +389,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -397,7 +397,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -452,7 +452,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -460,7 +460,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -529,7 +529,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -537,7 +537,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -591,7 +591,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -599,7 +599,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' @@ -675,7 +675,7 @@ jobs: - name: 'Harden runner (block)' if: inputs.harden_runner_egress != 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -683,7 +683,7 @@ jobs: - name: 'Harden runner (audit)' if: inputs.harden_runner_egress == 'audit' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'audit' diff --git a/.github/workflows/clear-action-cache.yaml b/.github/workflows/clear-action-cache.yaml index 625d309..eba3732 100644 --- a/.github/workflows/clear-action-cache.yaml +++ b/.github/workflows/clear-action-cache.yaml @@ -60,7 +60,7 @@ jobs: # Harden the runner with the just-loaded allow-list. - name: 'Harden runner (block)' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > diff --git a/.github/workflows/release-drafter.yaml b/.github/workflows/release-drafter.yaml index 599855b..2fd5467 100644 --- a/.github/workflows/release-drafter.yaml +++ b/.github/workflows/release-drafter.yaml @@ -35,7 +35,7 @@ jobs: # Harden the runner with the just-loaded allow-list. - name: 'Harden runner (block)' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > diff --git a/.github/workflows/tag-push.yaml b/.github/workflows/tag-push.yaml index 93d716b..30215c8 100644 --- a/.github/workflows/tag-push.yaml +++ b/.github/workflows/tag-push.yaml @@ -43,7 +43,7 @@ jobs: # Harden the runner with the just-loaded allow-list. - name: 'Harden runner (block)' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: > @@ -85,7 +85,7 @@ jobs: # Harden the runner with the just-loaded allow-list. - name: 'Harden runner (block)' # yamllint disable-line rule:line-length - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: 'block' allowed-endpoints: >