diff options
Diffstat (limited to '.github')
-rw-r--r-- | .github/workflows/build-extra.yml | 8 | ||||
-rw-r--r-- | .github/workflows/build.yml | 2 | ||||
-rw-r--r-- | .github/workflows/codeql-analysis.yml | 8 | ||||
-rw-r--r-- | .github/workflows/profile-checks.yml | 2 |
4 files changed, 10 insertions, 10 deletions
diff --git a/.github/workflows/build-extra.yml b/.github/workflows/build-extra.yml index a319e1ac6..c0e0062cd 100644 --- a/.github/workflows/build-extra.yml +++ b/.github/workflows/build-extra.yml | |||
@@ -40,7 +40,7 @@ jobs: | |||
40 | runs-on: ubuntu-22.04 | 40 | runs-on: ubuntu-22.04 |
41 | steps: | 41 | steps: |
42 | - name: Harden Runner | 42 | - name: Harden Runner |
43 | uses: step-security/harden-runner@2e205a28d0e1da00c5f53b161f4067b052c61f34 | 43 | uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 |
44 | with: | 44 | with: |
45 | egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs | 45 | egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs |
46 | 46 | ||
@@ -59,7 +59,7 @@ jobs: | |||
59 | runs-on: ubuntu-22.04 | 59 | runs-on: ubuntu-22.04 |
60 | steps: | 60 | steps: |
61 | - name: Harden Runner | 61 | - name: Harden Runner |
62 | uses: step-security/harden-runner@2e205a28d0e1da00c5f53b161f4067b052c61f34 | 62 | uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 |
63 | with: | 63 | with: |
64 | egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs | 64 | egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs |
65 | 65 | ||
@@ -74,7 +74,7 @@ jobs: | |||
74 | runs-on: ubuntu-22.04 | 74 | runs-on: ubuntu-22.04 |
75 | steps: | 75 | steps: |
76 | - name: Harden Runner | 76 | - name: Harden Runner |
77 | uses: step-security/harden-runner@2e205a28d0e1da00c5f53b161f4067b052c61f34 | 77 | uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 |
78 | with: | 78 | with: |
79 | egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs | 79 | egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs |
80 | 80 | ||
@@ -89,7 +89,7 @@ jobs: | |||
89 | runs-on: ubuntu-20.04 | 89 | runs-on: ubuntu-20.04 |
90 | steps: | 90 | steps: |
91 | - name: Harden Runner | 91 | - name: Harden Runner |
92 | uses: step-security/harden-runner@2e205a28d0e1da00c5f53b161f4067b052c61f34 | 92 | uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 |
93 | with: | 93 | with: |
94 | egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs | 94 | egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs |
95 | 95 | ||
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index e383c9ef2..6612e256d 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml | |||
@@ -32,7 +32,7 @@ jobs: | |||
32 | runs-on: ubuntu-22.04 | 32 | runs-on: ubuntu-22.04 |
33 | steps: | 33 | steps: |
34 | - name: Harden Runner | 34 | - name: Harden Runner |
35 | uses: step-security/harden-runner@2e205a28d0e1da00c5f53b161f4067b052c61f34 | 35 | uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 |
36 | with: | 36 | with: |
37 | egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs | 37 | egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs |
38 | 38 | ||
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 8b84f4d16..2190c9a1d 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml | |||
@@ -56,7 +56,7 @@ jobs: | |||
56 | 56 | ||
57 | steps: | 57 | steps: |
58 | - name: Harden Runner | 58 | - name: Harden Runner |
59 | uses: step-security/harden-runner@2e205a28d0e1da00c5f53b161f4067b052c61f34 | 59 | uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 |
60 | with: | 60 | with: |
61 | egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs | 61 | egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs |
62 | 62 | ||
@@ -65,7 +65,7 @@ jobs: | |||
65 | 65 | ||
66 | # Initializes the CodeQL tools for scanning. | 66 | # Initializes the CodeQL tools for scanning. |
67 | - name: Initialize CodeQL | 67 | - name: Initialize CodeQL |
68 | uses: github/codeql-action/init@ec3cf9c605b848da5f1e41e8452719eb1ccfb9a6 | 68 | uses: github/codeql-action/init@c3b6fce4ee2ca25bc1066aa3bf73962fda0e8898 |
69 | with: | 69 | with: |
70 | languages: ${{ matrix.language }} | 70 | languages: ${{ matrix.language }} |
71 | # If you wish to specify custom queries, you can do so here or in a config file. | 71 | # If you wish to specify custom queries, you can do so here or in a config file. |
@@ -76,7 +76,7 @@ jobs: | |||
76 | # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). | 76 | # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). |
77 | # If this step fails, then you should remove it and run the build manually (see below) | 77 | # If this step fails, then you should remove it and run the build manually (see below) |
78 | - name: Autobuild | 78 | - name: Autobuild |
79 | uses: github/codeql-action/autobuild@ec3cf9c605b848da5f1e41e8452719eb1ccfb9a6 | 79 | uses: github/codeql-action/autobuild@c3b6fce4ee2ca25bc1066aa3bf73962fda0e8898 |
80 | 80 | ||
81 | # âšī¸ Command-line programs to run using the OS shell. | 81 | # âšī¸ Command-line programs to run using the OS shell. |
82 | # đ https://git.io/JvXDl | 82 | # đ https://git.io/JvXDl |
@@ -90,4 +90,4 @@ jobs: | |||
90 | # make release | 90 | # make release |
91 | 91 | ||
92 | - name: Perform CodeQL Analysis | 92 | - name: Perform CodeQL Analysis |
93 | uses: github/codeql-action/analyze@ec3cf9c605b848da5f1e41e8452719eb1ccfb9a6 | 93 | uses: github/codeql-action/analyze@c3b6fce4ee2ca25bc1066aa3bf73962fda0e8898 |
diff --git a/.github/workflows/profile-checks.yml b/.github/workflows/profile-checks.yml index f5de62412..d36d050ab 100644 --- a/.github/workflows/profile-checks.yml +++ b/.github/workflows/profile-checks.yml | |||
@@ -24,7 +24,7 @@ jobs: | |||
24 | runs-on: ubuntu-latest | 24 | runs-on: ubuntu-latest |
25 | steps: | 25 | steps: |
26 | - name: Harden Runner | 26 | - name: Harden Runner |
27 | uses: step-security/harden-runner@2e205a28d0e1da00c5f53b161f4067b052c61f34 | 27 | uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 |
28 | with: | 28 | with: |
29 | egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs | 29 | egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs |
30 | 30 | ||