|
44 | 44 | build_matrix: ${{ steps.out.outputs.BUILD_MATRIX }} |
45 | 45 | steps: |
46 | 46 | - name: Harden the runner (Audit all outbound calls) |
47 | | - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 |
| 47 | + uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 |
48 | 48 | with: |
49 | 49 | egress-policy: audit |
50 | 50 | - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 |
|
83 | 83 | NPM_VERSION: ${{ needs.setup.outputs.npm_version }} |
84 | 84 | steps: |
85 | 85 | - name: Harden the runner (Audit all outbound calls) |
86 | | - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 |
| 86 | + uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 |
87 | 87 | with: |
88 | 88 | egress-policy: audit |
89 | 89 | - uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1.7.0 |
@@ -134,7 +134,7 @@ jobs: |
134 | 134 | needs: build |
135 | 135 | steps: |
136 | 136 | - name: Harden the runner (Audit all outbound calls) |
137 | | - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 |
| 137 | + uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 |
138 | 138 | with: |
139 | 139 | egress-policy: audit |
140 | 140 | - uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1.7.0 |
@@ -228,7 +228,7 @@ jobs: |
228 | 228 | NPM_TAG: ${{ needs.setup.outputs.npm_tag }} |
229 | 229 | steps: |
230 | 230 | - name: Harden the runner (Audit all outbound calls) |
231 | | - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 |
| 231 | + uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 |
232 | 232 | with: |
233 | 233 | egress-policy: audit |
234 | 234 | - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 |
@@ -287,7 +287,7 @@ jobs: |
287 | 287 | NPM_TAG: ${{ needs.setup.outputs.npm_tag }} |
288 | 288 | steps: |
289 | 289 | - name: Harden the runner (Audit all outbound calls) |
290 | | - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 |
| 290 | + uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 |
291 | 291 | with: |
292 | 292 | egress-policy: audit |
293 | 293 | - name: Mint ios-spm App token (short-lived, scoped to ios-spm) |
@@ -376,7 +376,7 @@ jobs: |
376 | 376 | NPM_TAG: ${{ needs.setup.outputs.npm_tag }} |
377 | 377 | steps: |
378 | 378 | - name: Harden the runner (Audit all outbound calls) |
379 | | - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 |
| 379 | + uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 |
380 | 380 | with: |
381 | 381 | egress-policy: audit |
382 | 382 | - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 |
@@ -437,7 +437,7 @@ jobs: |
437 | 437 | NPM_TAG: ${{ needs.setup.outputs.npm_tag }} |
438 | 438 | steps: |
439 | 439 | - name: Harden the runner (Audit all outbound calls) |
440 | | - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 |
| 440 | + uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 |
441 | 441 | with: |
442 | 442 | egress-policy: audit |
443 | 443 | - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 |
|
0 commit comments