diff --git a/.github/workflows/pr-build.yml b/.github/workflows/pr-build.yml index 874f57246..02d79eb9e 100644 --- a/.github/workflows/pr-build.yml +++ b/.github/workflows/pr-build.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: disable-sudo-and-containers: true egress-policy: block diff --git a/.github/workflows/site-build.yml b/.github/workflows/site-build.yml index 8e158d3d9..74379b30a 100644 --- a/.github/workflows/site-build.yml +++ b/.github/workflows/site-build.yml @@ -25,7 +25,7 @@ jobs: contents: write steps: - - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: disable-sudo-and-containers: true egress-policy: block @@ -96,7 +96,7 @@ jobs: needs: [build] steps: - - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: audit allowed-endpoints: >