Bump step-security/harden-runner from 2.2.1 to 2.3.0 (#899)

Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.2.1 to 2.3.0. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@1f99358...03bee39) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
ben-manes · Apr 5, 2023 · 00f5862 · 00f5862
1 parent 2a8e0f5
commit 00f5862
Show file tree

Hide file tree

Showing 16 changed files with 22 additions and 22 deletions.
diff --git a/.github/workflows/analysis.yml b/.github/workflows/analysis.yml
@@ -13,7 +13,7 @@ jobs:
       JAVA_VERSION: 20
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           disable-sudo: true
           egress-policy: audit
@@ -29,7 +29,7 @@ jobs:
       JAVA_VERSION: 20
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           disable-sudo: true
           egress-policy: audit
@@ -45,7 +45,7 @@ jobs:
       JAVA_VERSION: 20
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           disable-sudo: true
           egress-policy: audit

diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml
@@ -17,7 +17,7 @@ jobs:
       JAVA_VERSION: ${{ matrix.java }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           disable-sudo: true
           egress-policy: audit

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -46,7 +46,7 @@ jobs:
       JAVA_VERSION: ${{ matrix.java }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           disable-sudo: true
           egress-policy: block
@@ -138,7 +138,7 @@ jobs:
       JAVA_VERSION: ${{ matrix.java }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           disable-sudo: true
           egress-policy: block
@@ -181,7 +181,7 @@ jobs:
     if: github.event_name == 'push'
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           disable-sudo: true
           egress-policy: block
@@ -247,7 +247,7 @@ jobs:
       checks: write
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           disable-sudo: true
           egress-policy: block
@@ -297,7 +297,7 @@ jobs:
       && endsWith(github.ref, github.event.repository.default_branch)
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           disable-sudo: true
           egress-policy: block

diff --git a/.github/workflows/codacy.yml b/.github/workflows/codacy.yml
@@ -11,7 +11,7 @@ jobs:
       security-events: write
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           disable-sudo: true
           egress-policy: audit

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           egress-policy: audit
       - name: Checkout repository

diff --git a/.github/workflows/dependency-check.yml b/.github/workflows/dependency-check.yml
@@ -20,7 +20,7 @@ jobs:
       security-events: write
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           disable-sudo: true
           egress-policy: audit

diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           disable-sudo: true
           egress-policy: audit

diff --git a/.github/workflows/dependency-submission.yml b/.github/workflows/dependency-submission.yml
@@ -16,7 +16,7 @@ jobs:
       contents: write
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           disable-sudo: true
           egress-policy: audit

diff --git a/.github/workflows/devskim.yml b/.github/workflows/devskim.yml
@@ -19,7 +19,7 @@ jobs:
       security-events: write
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           disable-sudo: true
           egress-policy: audit

diff --git a/.github/workflows/examples.yml b/.github/workflows/examples.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           disable-sudo: true
           egress-policy: audit

diff --git a/.github/workflows/gradle-wrapper-validation.yml b/.github/workflows/gradle-wrapper-validation.yml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           disable-sudo: true
           egress-policy: audit

diff --git a/.github/workflows/qodana.yml b/.github/workflows/qodana.yml
@@ -16,7 +16,7 @@ jobs:
       security-events: write
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           disable-sudo: true
           egress-policy: audit

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           disable-sudo: true
           egress-policy: audit

diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
@@ -17,7 +17,7 @@ jobs:
       image: returntocorp/semgrep
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           disable-sudo: true
           egress-policy: audit

diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml
@@ -20,7 +20,7 @@ jobs:
       SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           disable-sudo: true
           egress-policy: audit

diff --git a/.github/workflows/spelling.yml b/.github/workflows/spelling.yml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@1f99358870fe1c846a3ccba386cc2b2246836776
+        uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f
         with:
           disable-sudo: true
           egress-policy: audit