9797 pull-requests : read # Read PR labels for release-drafter
9898 steps :
9999 - name : Harden the runner (Audit all outbound calls)
100- uses : step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
100+ uses : step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
101101 with :
102102 egress-policy : audit
103103 - name : Checkout
@@ -107,7 +107,7 @@ jobs:
107107 persist-credentials : true # Required for git push of tags
108108 - name : Draft release
109109 id : release-drafter
110- uses : release-drafter/release-drafter@5de93583980a40bd78603b6dfdcda5b4df377b32 # v7.2.0
110+ uses : release-drafter/release-drafter@563bf132657a13ded0b01fcb723c5a58cdd824e2 # v7.2.1
111111 with :
112112 config-name : ${{ inputs.release-config-name }}
113113 publish : false
@@ -134,7 +134,7 @@ jobs:
134134 attestations : write # Generate artifact attestations
135135 steps :
136136 - name : Harden the runner (Audit all outbound calls)
137- uses : step-security/harden-runner@fe104658747b27e96e4f7e80cd0a94068e53901d # v2.16 .1
137+ uses : step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19 .1
138138 with :
139139 egress-policy : audit
140140
@@ -227,7 +227,7 @@ jobs:
227227 IMAGE_REGISTRY_PASSWORD : ${{ secrets.image-registry-password }}
228228 steps :
229229 - name : Harden the runner (Audit all outbound calls)
230- uses : step-security/harden-runner@fe104658747b27e96e4f7e80cd0a94068e53901d # v2.16 .1
230+ uses : step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19 .1
231231 with :
232232 egress-policy : audit
233233
@@ -331,7 +331,7 @@ jobs:
331331
332332 - name : Harden the runner (Audit all outbound calls)
333333 if : ${{ steps.check-inputs.outputs.skip == 'false' }}
334- uses : step-security/harden-runner@fe104658747b27e96e4f7e80cd0a94068e53901d # v2.16 .1
334+ uses : step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19 .1
335335 with :
336336 egress-policy : audit
337337
@@ -359,7 +359,7 @@ jobs:
359359 contents : write # Publish draft release
360360 steps :
361361 - name : Harden the runner (Audit all outbound calls)
362- uses : step-security/harden-runner@fe104658747b27e96e4f7e80cd0a94068e53901d # v2.16 .1
362+ uses : step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19 .1
363363 with :
364364 egress-policy : audit
365365
0 commit comments