Commit 1fc50c2
authored
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -27,7 +27,7 @@ jobs: | |||
| 27 | 27 | ||
| 28 | 28 | steps: | |
| 29 | 29 | - name: Harden the runner (Audit all outbound calls) | |
| 30 | - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 | ||
| 30 | + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 | ||
| 31 | 31 | with: | |
| 32 | 32 | egress-policy: audit | |
| 33 | 33 | ||
@@ -70,7 +70,7 @@ jobs: | |||
| 70 | 70 | ||
| 71 | 71 | steps: | |
| 72 | 72 | - name: Harden the runner (Audit all outbound calls) | |
| 73 | - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 | ||
| 73 | + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 | ||
| 74 | 74 | with: | |
| 75 | 75 | egress-policy: audit | |
| 76 | 76 | ||
@@ -101,7 +101,7 @@ jobs: | |||
| 101 | 101 | runs-on: ubuntu-latest | |
| 102 | 102 | steps: | |
| 103 | 103 | - name: Harden the runner (Audit all outbound calls) | |
| 104 | - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 | ||
| 104 | + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 | ||
| 105 | 105 | with: | |
| 106 | 106 | egress-policy: audit | |
| 107 | 107 | ||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -20,7 +20,7 @@ jobs: | |||
| 20 | 20 | ||
| 21 | 21 | steps: | |
| 22 | 22 | - name: Harden the runner (Audit all outbound calls) | |
| 23 | - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 | ||
| 23 | + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 | ||
| 24 | 24 | with: | |
| 25 | 25 | egress-policy: audit | |
| 26 | 26 | ||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -29,7 +29,7 @@ jobs: | |||
| 29 | 29 | ||
| 30 | 30 | steps: | |
| 31 | 31 | - name: Harden the runner (Audit all outbound calls) | |
| 32 | - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 | ||
| 32 | + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 | ||
| 33 | 33 | with: | |
| 34 | 34 | egress-policy: audit | |
| 35 | 35 | ||
@@ -58,7 +58,7 @@ jobs: | |||
| 58 | 58 | ||
| 59 | 59 | steps: | |
| 60 | 60 | - name: Harden the runner (Audit all outbound calls) | |
| 61 | - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 | ||
| 61 | + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 | ||
| 62 | 62 | with: | |
| 63 | 63 | egress-policy: audit | |
| 64 | 64 | ||
@@ -116,7 +116,7 @@ jobs: | |||
| 116 | 116 | ||
| 117 | 117 | steps: | |
| 118 | 118 | - name: Harden the runner (Audit all outbound calls) | |
| 119 | - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 | ||
| 119 | + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 | ||
| 120 | 120 | with: | |
| 121 | 121 | egress-policy: audit | |
| 122 | 122 | ||
@@ -153,7 +153,7 @@ jobs: | |||
| 153 | 153 | ||
| 154 | 154 | steps: | |
| 155 | 155 | - name: Harden the runner (Audit all outbound calls) | |
| 156 | - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 | ||
| 156 | + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 | ||
| 157 | 157 | with: | |
| 158 | 158 | egress-policy: audit | |
| 159 | 159 | ||
@@ -196,7 +196,7 @@ jobs: | |||
| 196 | 196 | ||
| 197 | 197 | steps: | |
| 198 | 198 | - name: Harden the runner (Audit all outbound calls) | |
| 199 | - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 | ||
| 199 | + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 | ||
| 200 | 200 | with: | |
| 201 | 201 | egress-policy: audit | |
| 202 | 202 | ||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -21,7 +21,7 @@ jobs: | |||
| 21 | 21 | runs-on: "ubuntu-latest" | |
| 22 | 22 | steps: | |
| 23 | 23 | - name: Harden the runner (Audit all outbound calls) | |
| 24 | - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 | ||
| 24 | + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 | ||
| 25 | 25 | with: | |
| 26 | 26 | egress-policy: audit | |
| 27 | 27 | ||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -15,7 +15,7 @@ jobs: | |||
| 15 | 15 | runs-on: ubuntu-latest | |
| 16 | 16 | steps: | |
| 17 | 17 | - name: Harden the runner (Audit all outbound calls) | |
| 18 | - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 | ||
| 18 | + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 | ||
| 19 | 19 | with: | |
| 20 | 20 | egress-policy: audit | |
| 21 | 21 | ||
@@ -35,7 +35,7 @@ jobs: | |||
| 35 | 35 | timeout-minutes: 10 | |
| 36 | 36 | steps: | |
| 37 | 37 | - name: Harden the runner (Audit all outbound calls) | |
| 38 | - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 | ||
| 38 | + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 | ||
| 39 | 39 | with: | |
| 40 | 40 | egress-policy: audit | |
| 41 | 41 | ||
@@ -47,7 +47,7 @@ jobs: | |||
| 47 | 47 | filter_triggers: '' | |
| 48 | 48 | ||
| 49 | 49 | - name: Upload SARIF file to GitHub | |
| 50 | - uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 | ||
| 50 | + uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 | ||
| 51 | 51 | with: | |
| 52 | 52 | sarif_file: "${{steps.octoscan.outputs.sarif_output}}" | |
| 53 | 53 | category: octoscan | |
@@ -60,7 +60,7 @@ jobs: | |||
| 60 | 60 | security-events: write # Required for codeql-action/upload-sarif to upload SARIF files. | |
| 61 | 61 | steps: | |
| 62 | 62 | - name: Harden the runner (Audit all outbound calls) | |
| 63 | - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 | ||
| 63 | + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 | ||
| 64 | 64 | with: | |
| 65 | 65 | egress-policy: audit | |
| 66 | 66 | ||
@@ -73,7 +73,7 @@ jobs: | |||
| 73 | 73 | uses: boostsecurityio/poutine-action@e240ebd3eff8b2db5a8e5f6b28f58739d7db2247 # v1.1.4 | |
| 74 | 74 | ||
| 75 | 75 | - name: Upload poutine SARIF file | |
| 76 | - uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 | ||
| 76 | + uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 | ||
| 77 | 77 | with: | |
| 78 | 78 | sarif_file: results.sarif | |
| 79 | 79 | category: poutine | |
@@ -86,7 +86,7 @@ jobs: | |||
| 86 | 86 | security-events: write # Required for codeql-action/upload-sarif to upload SARIF files. | |
| 87 | 87 | steps: | |
| 88 | 88 | - name: Harden the runner (Audit all outbound calls) | |
| 89 | - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 | ||
| 89 | + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 | ||
| 90 | 90 | with: | |
| 91 | 91 | egress-policy: audit | |
| 92 | 92 | ||
@@ -106,7 +106,7 @@ jobs: | |||
| 106 | 106 | GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| 107 | 107 | ||
| 108 | 108 | - name: Upload SARIF file | |
| 109 | - uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 | ||
| 109 | + uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 | ||
| 110 | 110 | with: | |
| 111 | 111 | sarif_file: results.sarif | |
| 112 | 112 | category: zizmor | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -14,7 +14,7 @@ jobs: | |||
| 14 | 14 | runs-on: ubuntu-latest | |
| 15 | 15 | steps: | |
| 16 | 16 | - name: Harden the runner (Audit all outbound calls) | |
| 17 | - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 | ||
| 17 | + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 | ||
| 18 | 18 | with: | |
| 19 | 19 | egress-policy: audit | |
| 20 | 20 | ||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -13,7 +13,7 @@ jobs: | |||
| 13 | 13 | runs-on: ubuntu-latest | |
| 14 | 14 | steps: | |
| 15 | 15 | - name: Harden the runner (Audit all outbound calls) | |
| 16 | - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 | ||
| 16 | + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 | ||
| 17 | 17 | with: | |
| 18 | 18 | egress-policy: audit | |
| 19 | 19 | ||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -11,11 +11,11 @@ jobs: | |||
| 11 | 11 | runs-on: ubuntu-latest | |
| 12 | 12 | steps: | |
| 13 | 13 | - name: Harden the runner (Audit all outbound calls) | |
| 14 | - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 | ||
| 14 | + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 | ||
| 15 | 15 | with: | |
| 16 | 16 | egress-policy: audit | |
| 17 | 17 | ||
| 18 | - - uses: cbrgm/mastodon-github-action@7fcc3650150fc062d707eeffb50e8f7a2704fd0f # v2.2.3 | ||
| 18 | + - uses: cbrgm/mastodon-github-action@9ba8763f1daa436d73fb76abbc3e8b2ac8dfa943 # v2.2.4 | ||
| 19 | 19 | if: ${{ !github.event.repository.private }} | |
| 20 | 20 | with: | |
| 21 | 21 | # GitHub event payload | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -11,7 +11,7 @@ jobs: | |||
| 11 | 11 | runs-on: ubuntu-latest | |
| 12 | 12 | steps: | |
| 13 | 13 | - name: Harden the runner (Audit all outbound calls) | |
| 14 | - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 | ||
| 14 | + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 | ||
| 15 | 15 | with: | |
| 16 | 16 | egress-policy: audit | |
| 17 | 17 | ||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -14,7 +14,7 @@ jobs: | |||
| 14 | 14 | ||
| 15 | 15 | steps: | |
| 16 | 16 | - name: Harden the runner (Audit all outbound calls) | |
| 17 | - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 | ||
| 17 | + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 | ||
| 18 | 18 | with: | |
| 19 | 19 | egress-policy: audit | |
| 20 | 20 | ||
@@ -23,12 +23,12 @@ jobs: | |||
| 23 | 23 | ||
| 24 | 24 | - name: Generate changelog | |
| 25 | 25 | id: changelog | |
| 26 | - uses: metcalfc/changelog-generator@98b12822c5dc6bad335d1d60d920cb69831b9c5d # v4.8.0 | ||
| 26 | + uses: metcalfc/changelog-generator@bb7a08e07e326061351dab6ce89c72f13797043c # v4.9.1 | ||
| 27 | 27 | with: | |
| 28 | 28 | myToken: ${{ secrets.PHPSTAN_BOT_TOKEN }} | |
| 29 | 29 | ||
| 30 | 30 | - name: "Create release" | |
| 31 | - uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2 | ||
| 31 | + uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3 | ||
| 32 | 32 | with: | |
| 33 | 33 | token: ${{ secrets.PHPSTAN_BOT_TOKEN }} | |
| 34 | 34 | tag_name: ${{ github.ref_name }} | |
0 commit comments