diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 32c1567..c9e5ce8 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -25,7 +25,7 @@ jobs: - 'go' steps: - name: 'Harden Runner' - uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3 + uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 with: egress-policy: 'audit' - name: 'Checkout' diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml index abd72b1..8d28f86 100644 --- a/.github/workflows/dependabot.yml +++ b/.github/workflows/dependabot.yml @@ -11,7 +11,7 @@ jobs: if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'go-crypt/crypt' steps: - name: 'Harden Runner' - uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3 + uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 with: egress-policy: 'audit' - name: 'Dependabot Fetch Metadata' diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 2970ca8..1bcdc70 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -9,7 +9,7 @@ jobs: runs-on: 'ubuntu-latest' steps: - name: 'Harden Runner' - uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3 + uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 with: egress-policy: 'audit' - name: 'Checkout Repository' diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml index 2804400..9479825 100644 --- a/.github/workflows/go.yml +++ b/.github/workflows/go.yml @@ -12,7 +12,7 @@ jobs: runs-on: 'ubuntu-latest' steps: - name: 'Harden Runner' - uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3 + uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 with: egress-policy: 'audit' - name: 'Set up Go' @@ -42,7 +42,7 @@ jobs: fail-fast: false steps: - name: 'Harden Runner' - uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3 + uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 with: egress-policy: 'audit' - name: 'Set up Go ${{ matrix.go }}' diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 5d31d01..65acdc0 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -18,7 +18,7 @@ jobs: actions: 'read' steps: - name: 'Harden Runner' - uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3 + uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 with: egress-policy: 'audit' - name: 'Checkout'