🔒 harden runners (#4985)

This commit is contained in:
Niels Lohmann
2025-11-03 06:33:14 +01:00
committed by GitHub
parent 0c9b68e110
commit c8b66cf36e
2 changed files with 10 additions and 0 deletions

View File

@@ -26,6 +26,11 @@ jobs:
contents: read contents: read
security-events: write security-events: write
steps: steps:
- name: Harden Runner
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
with:
egress-policy: audit
- name: Checkout code - name: Checkout code
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

View File

@@ -31,6 +31,11 @@ jobs:
name: Scan name: Scan
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Harden Runner
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
with:
egress-policy: audit
# Checkout project source # Checkout project source
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0