diff --git a/.github/workflows/000-flow-changeset-check.yaml b/.github/workflows/000-flow-changeset-check.yaml index 6070fd2257..e3ae2fae23 100644 --- a/.github/workflows/000-flow-changeset-check.yaml +++ b/.github/workflows/000-flow-changeset-check.yaml @@ -28,7 +28,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1 + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 with: egress-policy: audit diff --git a/.github/workflows/001-flow-pull-request-formatting.yaml b/.github/workflows/001-flow-pull-request-formatting.yaml index 028c845011..9b8826f206 100644 --- a/.github/workflows/001-flow-pull-request-formatting.yaml +++ b/.github/workflows/001-flow-pull-request-formatting.yaml @@ -24,7 +24,7 @@ jobs: timeout-minutes: 5 steps: - name: Harden Runner - uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1 + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 with: egress-policy: audit @@ -39,7 +39,7 @@ jobs: timeout-minutes: 5 steps: - name: Harden Runner - uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1 + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 with: egress-policy: audit diff --git a/.github/workflows/002-user-ats-release.yaml b/.github/workflows/002-user-ats-release.yaml index c9176a1a49..e43414adcc 100644 --- a/.github/workflows/002-user-ats-release.yaml +++ b/.github/workflows/002-user-ats-release.yaml @@ -29,7 +29,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1 + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 with: egress-policy: audit diff --git a/.github/workflows/003-user-mp-release.yaml b/.github/workflows/003-user-mp-release.yaml index ea89cbc213..4fdf2f54ac 100644 --- a/.github/workflows/003-user-mp-release.yaml +++ b/.github/workflows/003-user-mp-release.yaml @@ -29,7 +29,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1 + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 with: egress-policy: audit diff --git a/.github/workflows/100-flow-ats-test.yaml b/.github/workflows/100-flow-ats-test.yaml index 0d6d56dbc5..249905c341 100644 --- a/.github/workflows/100-flow-ats-test.yaml +++ b/.github/workflows/100-flow-ats-test.yaml @@ -53,7 +53,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1 + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 with: egress-policy: audit diff --git a/.github/workflows/101-flow-mp-test.yaml b/.github/workflows/101-flow-mp-test.yaml index a1e4e5de20..9dc4fe55d0 100644 --- a/.github/workflows/101-flow-mp-test.yaml +++ b/.github/workflows/101-flow-mp-test.yaml @@ -53,7 +53,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1 + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 with: egress-policy: audit diff --git a/.github/workflows/102-flow-ats-deployment-test.yaml b/.github/workflows/102-flow-ats-deployment-test.yaml index bb6fb5429a..9c6fb43fa4 100644 --- a/.github/workflows/102-flow-ats-deployment-test.yaml +++ b/.github/workflows/102-flow-ats-deployment-test.yaml @@ -41,7 +41,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1 + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 with: egress-policy: audit @@ -108,7 +108,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1 + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 with: egress-policy: audit @@ -229,7 +229,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1 + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 with: egress-policy: audit diff --git a/.github/workflows/300-flow-ats-publish.yaml b/.github/workflows/300-flow-ats-publish.yaml index 100640528c..236457b3bd 100644 --- a/.github/workflows/300-flow-ats-publish.yaml +++ b/.github/workflows/300-flow-ats-publish.yaml @@ -35,7 +35,7 @@ jobs: artifact-name: ${{ steps.prepare-package-data.outputs.artifact-name }} steps: - name: Harden Runner - uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1 + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 with: egress-policy: audit @@ -101,7 +101,7 @@ jobs: artifact-name: ${{ steps.prepare-package-data.outputs.artifact-name }} steps: - name: Harden Runner - uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1 + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 with: egress-policy: audit @@ -166,7 +166,7 @@ jobs: - prepare-sdk steps: - name: Harden Runner - uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1 + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 with: egress-policy: audit @@ -229,7 +229,7 @@ jobs: if: ${{ always() }} steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1 + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 with: egress-policy: audit diff --git a/.github/workflows/301-flow-mp-publish.yaml b/.github/workflows/301-flow-mp-publish.yaml index ccc2fe8b20..bb373f2995 100644 --- a/.github/workflows/301-flow-mp-publish.yaml +++ b/.github/workflows/301-flow-mp-publish.yaml @@ -34,7 +34,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1 + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 with: egress-policy: audit @@ -131,7 +131,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1 + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 with: egress-policy: audit @@ -188,7 +188,7 @@ jobs: if: ${{ always() }} steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1 + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 with: egress-policy: audit