Skip to content

Update step-security/harden-runner action to v2.12.1#775

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/all-patch
Jun 12, 2025
Merged

Update step-security/harden-runner action to v2.12.1#775
renovate[bot] merged 1 commit into
mainfrom
renovate/all-patch

Conversation

@renovate

@renovate renovate Bot commented Jun 12, 2025

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
step-security/harden-runner action patch v2.12.0 -> v2.12.1

Release Notes

step-security/harden-runner (step-security/harden-runner)

v2.12.1

Compare Source

What's Changed
  • Detection capabilities have been upgraded to better recognize attempts at runner tampering. These improvements are informed by real-world incident learnings, including analysis of anomalous behaviors observed in the tj-actions and reviewdog supply chain attack.
  • Resolved an issue where the block policy was not enforced correctly when the GitHub Actions job was running inside a container on a self-hosted VM runner.

Full Changelog: step-security/harden-runner@v2...v2.12.1


Configuration

📅 Schedule: Branch creation - "after 5pm every weekday,before 8am every weekday,every weekend" in timezone America/Chicago, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added dependencies Pull requests that update a dependency file renovate labels Jun 12, 2025
@renovate renovate Bot merged commit 6a0bf46 into main Jun 12, 2025
13 checks passed
@renovate renovate Bot deleted the renovate/all-patch branch June 12, 2025 05:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file renovate

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant