From 4b9d068f469ed96e879ed19c812b7b6d4edca033 Mon Sep 17 00:00:00 2001 From: Rich Trott Date: Fri, 12 May 2023 09:31:55 -0700 Subject: [PATCH] meta: bump step-security/harden-runner from 2.3.1 to 2.4.0 --- .github/workflows/scorecard.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index df4db9aff4dec1..4f0ed9f756867d 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -33,7 +33,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@6b3083af2869dc3314a0257a42f4af696cc79ba3 # v2.3.1 + uses: step-security/harden-runner@128a63446a954579617e875aaab7d2978154e969 # v2.4.0 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs