From 6397945acfc6a79ae6be369a7d3a6b12029a7b61 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 15 Oct 2026 17:57:04 +0000 Subject: [PATCH] Bump step-security/harden-runner from 2.21.1 to 2.22.1 Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.21.1 to 2.22.1. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/e14015d583714f6e62063499dc959a02595150a1...ccd8616d44fd3846e67624a50d5aad6d37bf2d25) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.22.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 2 +- .github/workflows/coverage.yml | 2 +- .github/workflows/dependency-review.yml | 2 +- .github/workflows/publish.yml | 4 ++-- .github/workflows/python.yml | 14 +++++++------- 5 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 4d13c05..5620498 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -27,7 +27,7 @@ jobs: - python steps: - - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 + - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 with: disable-sudo: true egress-policy: block diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml index 5e30756..95f25e4 100644 --- a/.github/workflows/coverage.yml +++ b/.github/workflows/coverage.yml @@ -31,7 +31,7 @@ jobs: steps: # DO NOT run actions/checkout here, for security reasons # For details, refer to https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ - - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 + - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 with: disable-sudo: false egress-policy: audit diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 3a7101e..82efc54 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -11,7 +11,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 + - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 with: disable-sudo: true egress-policy: block diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index f879abf..34a5118 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -19,7 +19,7 @@ jobs: contents: read steps: - - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 + - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 with: disable-sudo: true egress-policy: block @@ -73,7 +73,7 @@ jobs: id-token: write steps: - - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 + - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 with: disable-sudo: true egress-policy: audit diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml index 86d11ea..07dd529 100644 --- a/.github/workflows/python.yml +++ b/.github/workflows/python.yml @@ -38,7 +38,7 @@ jobs: contents: write steps: - - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 + - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 with: disable-sudo: false egress-policy: audit @@ -83,7 +83,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 + - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 with: disable-sudo: true egress-policy: block @@ -121,7 +121,7 @@ jobs: security-events: write steps: - - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 + - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 with: disable-sudo: true egress-policy: block @@ -166,7 +166,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 + - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 with: disable-sudo: true egress-policy: block @@ -205,7 +205,7 @@ jobs: security-events: write steps: - - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 + - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 with: disable-sudo: true egress-policy: block @@ -246,7 +246,7 @@ jobs: pull-requests: write contents: write steps: - - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 + - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 with: disable-sudo: true egress-policy: block @@ -286,7 +286,7 @@ jobs: contents: write steps: - - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 + - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 with: disable-sudo: true egress-policy: block