Skip to content

Commit 89b4700

Browse files
renovate[bot]renovate[bot]
authored
Update step-security/harden-runner action to v2.21.1 (#397)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [step-security/harden-runner](https://redirect.github.com/step-security/harden-runner) | action | patch | `v2.21.0` → `v2.21.1` | --- ### Release Notes <details> <summary>step-security/harden-runner (step-security/harden-runner)</summary> ### [`v2.21.1`](https://redirect.github.com/step-security/harden-runner/releases/tag/v2.21.1) [Compare Source](https://redirect.github.com/step-security/harden-runner/compare/v2.21.0...v2.21.1) ##### What's Changed - Improved performance of the `disable-sudo` feature. - Fixed an issue in the Community tier where new endpoints required by the GitHub Actions runner were not being implicitly allowed in block mode. - Fixed the Harden-Runner post step failing on Linux distributions that do not have a merged `/usr` filesystem layout (for example Debian 11), where `/usr/bin/echo` does not exist. This mainly affected self-hosted runners. - Documentation updates: clarified which features are in the Community (free) vs Enterprise tier. **Full Changelog**: <step-security/harden-runner@v2.21.0...v2.21.1> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/netresearch/.github). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC41Ny4zIiwidXBkYXRlZEluVmVyIjoiNDQuNTcuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
2 parents fda7ee9 + 1a9353b commit 89b4700

57 files changed

Lines changed: 86 additions & 86 deletions

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.github/workflows/ansible-galaxy-release.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -103,7 +103,7 @@ jobs:
103103
contents: read
104104
steps:
105105
- name: Harden Runner
106-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
106+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
107107
with:
108108
egress-policy: audit
109109

@@ -127,7 +127,7 @@ jobs:
127127
contents: write
128128
steps:
129129
- name: Harden Runner
130-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
130+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
131131
with:
132132
egress-policy: audit
133133

‎.github/workflows/ansible-lint.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -126,7 +126,7 @@ jobs:
126126
working-directory: ${{ inputs.working-directory }}
127127
steps:
128128
- name: Harden Runner
129-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
129+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
130130
with:
131131
egress-policy: audit
132132

‎.github/workflows/ansible-molecule.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -152,7 +152,7 @@ jobs:
152152
working-directory: ${{ inputs.working-directory }}
153153
steps:
154154
- name: Harden Runner
155-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
155+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
156156
with:
157157
egress-policy: audit
158158

‎.github/workflows/attest-image.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -101,7 +101,7 @@ jobs:
101101
count: ${{ steps.parse.outputs.count }}
102102
steps:
103103
- name: Harden Runner
104-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
104+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
105105
with:
106106
egress-policy: audit
107107

@@ -151,7 +151,7 @@ jobs:
151151
subject: ${{ fromJSON(needs.prepare.outputs.subjects) }}
152152
steps:
153153
- name: Harden Runner
154-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
154+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
155155
with:
156156
egress-policy: audit
157157

‎.github/workflows/attest-sbom.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -118,7 +118,7 @@ jobs:
118118
count: ${{ steps.parse.outputs.count }}
119119
steps:
120120
- name: Harden Runner
121-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
121+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
122122
with:
123123
egress-policy: audit
124124

@@ -180,7 +180,7 @@ jobs:
180180
subject: ${{ fromJSON(needs.prepare.outputs.subjects) }}
181181
steps:
182182
- name: Harden Runner
183-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
183+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
184184
with:
185185
egress-policy: audit
186186

‎.github/workflows/auto-merge-deps.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -81,7 +81,7 @@ jobs:
8181
pull-requests: write
8282
steps:
8383
- name: Harden Runner
84-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
84+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
8585
with:
8686
egress-policy: audit
8787

‎.github/workflows/build-container-bake.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -335,7 +335,7 @@ jobs:
335335
sbom-subjects: ${{ steps.sbomsubjects.outputs.subjects }}
336336
steps:
337337
- name: Harden Runner
338-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
338+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
339339
with:
340340
egress-policy: audit
341341

@@ -709,7 +709,7 @@ jobs:
709709
subject: ${{ fromJSON(needs.bake.outputs.sbom-subjects || '[]') }}
710710
steps:
711711
- name: Harden Runner
712-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
712+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
713713
with:
714714
egress-policy: audit
715715

‎.github/workflows/build-container.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -173,7 +173,7 @@ jobs:
173173
IMAGE_REF: ${{ inputs.registry }}/${{ github.repository_owner }}/${{ inputs.image-name }}
174174
steps:
175175
- name: Harden Runner
176-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
176+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
177177
with:
178178
egress-policy: audit
179179

‎.github/workflows/build-go-attest.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -154,7 +154,7 @@ jobs:
154154
attestations: write
155155
steps:
156156
- name: Harden Runner
157-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
157+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
158158
with:
159159
egress-policy: audit
160160

‎.github/workflows/check-template-drift.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -71,7 +71,7 @@ jobs:
7171
contents: read
7272
steps:
7373
- name: Harden Runner
74-
uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
74+
uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
7575
with:
7676
egress-policy: audit
7777

0 commit comments

Comments
 (0)