diff --git a/.github/workflows/pr-build.yml b/.github/workflows/pr-build.yml index 0ddb79096..5635df192 100644 --- a/.github/workflows/pr-build.yml +++ b/.github/workflows/pr-build.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + - uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: disable-sudo-and-containers: true egress-policy: block diff --git a/.github/workflows/site-build.yml b/.github/workflows/site-build.yml index 442deddc2..9e76f3dae 100644 --- a/.github/workflows/site-build.yml +++ b/.github/workflows/site-build.yml @@ -25,7 +25,7 @@ jobs: contents: write steps: - - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + - uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: disable-sudo-and-containers: true egress-policy: block @@ -96,7 +96,7 @@ jobs: needs: [build] steps: - - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + - uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit allowed-endpoints: >