diff --git a/.github/workflows/flow-pull-request-checks.yaml b/.github/workflows/flow-pull-request-checks.yaml index 1a76e7cd1..f90ee0940 100644 --- a/.github/workflows/flow-pull-request-checks.yaml +++ b/.github/workflows/flow-pull-request-checks.yaml @@ -32,7 +32,7 @@ jobs: runs-on: hiero-client-sdk-linux-large steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/on-comment.yaml b/.github/workflows/on-comment.yaml index 43ff07a05..d9c474fee 100644 --- a/.github/workflows/on-comment.yaml +++ b/.github/workflows/on-comment.yaml @@ -55,7 +55,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/on-pr-close.yaml b/.github/workflows/on-pr-close.yaml index 5fd961cbf..21ff2f9a7 100644 --- a/.github/workflows/on-pr-close.yaml +++ b/.github/workflows/on-pr-close.yaml @@ -23,7 +23,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit @@ -44,7 +44,7 @@ jobs: if: github.event.pull_request.merged == true steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/on-pr-review-labels.yaml b/.github/workflows/on-pr-review-labels.yaml index d5548fed0..4b75d557b 100644 --- a/.github/workflows/on-pr-review-labels.yaml +++ b/.github/workflows/on-pr-review-labels.yaml @@ -19,7 +19,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/on-pr-review.yaml b/.github/workflows/on-pr-review.yaml index 8e711c1bd..35cf8aa6e 100644 --- a/.github/workflows/on-pr-review.yaml +++ b/.github/workflows/on-pr-review.yaml @@ -19,7 +19,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/on-pr-update.yaml b/.github/workflows/on-pr-update.yaml index 682718d78..3a6aae429 100644 --- a/.github/workflows/on-pr-update.yaml +++ b/.github/workflows/on-pr-update.yaml @@ -26,7 +26,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/on-pr.yaml b/.github/workflows/on-pr.yaml index bf66dec50..b59a19e2a 100644 --- a/.github/workflows/on-pr.yaml +++ b/.github/workflows/on-pr.yaml @@ -28,7 +28,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/on-schedule-inactivity.yaml b/.github/workflows/on-schedule-inactivity.yaml index 9bdcc7b96..dc0166dd6 100644 --- a/.github/workflows/on-schedule-inactivity.yaml +++ b/.github/workflows/on-schedule-inactivity.yaml @@ -49,7 +49,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/zxc-build-library.yaml b/.github/workflows/zxc-build-library.yaml index 5e8ee0b79..f3d8004a2 100644 --- a/.github/workflows/zxc-build-library.yaml +++ b/.github/workflows/zxc-build-library.yaml @@ -63,7 +63,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit @@ -90,7 +90,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit @@ -240,7 +240,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit @@ -302,7 +302,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/zxc-lint-workflows.yaml b/.github/workflows/zxc-lint-workflows.yaml index 6989bf71e..8b20b3a13 100644 --- a/.github/workflows/zxc-lint-workflows.yaml +++ b/.github/workflows/zxc-lint-workflows.yaml @@ -28,7 +28,7 @@ jobs: runs-on: hiero-client-sdk-linux-large steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/zxc-test-bot-scripts.yaml b/.github/workflows/zxc-test-bot-scripts.yaml index bb1b54c79..8614a66e6 100644 --- a/.github/workflows/zxc-test-bot-scripts.yaml +++ b/.github/workflows/zxc-test-bot-scripts.yaml @@ -28,7 +28,7 @@ jobs: runs-on: hiero-client-sdk-linux-large steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit