diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml index 1dd44e63..33593d3d 100644 --- a/.github/workflows/continuous-integration.yml +++ b/.github/workflows/continuous-integration.yml @@ -29,7 +29,7 @@ jobs: fail-fast: false runs-on: ${{ matrix.os }} steps: - - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 + - uses: step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed # v2.22.0 if: ${{ matrix.os == 'ubuntu-latest' }} with: disable-sudo: true @@ -58,7 +58,7 @@ jobs: name: Code Lint runs-on: ubuntu-latest steps: - - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 + - uses: step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed # v2.22.0 with: disable-sudo: true egress-policy: block @@ -89,7 +89,7 @@ jobs: runs-on: ubuntu-latest if: ${{ github.event.pull_request }} steps: - - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 + - uses: step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed # v2.22.0 with: disable-sudo: true egress-policy: block @@ -127,7 +127,7 @@ jobs: name: Lockfile Lint runs-on: ubuntu-latest steps: - - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 + - uses: step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed # v2.22.0 with: disable-sudo: true egress-policy: block diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 5c0ad61b..70cdebd9 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -32,7 +32,7 @@ jobs: id-token: write steps: - - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 + - uses: step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed # v2.22.0 if: ${{ matrix.os == 'ubuntu-latest' }} with: disable-sudo: true