From fd8bec7b2b5e40108ef996403b29bb2372e689e4 Mon Sep 17 00:00:00 2001 From: Rich Trott Date: Sun, 14 May 2023 09:35:01 -0700 Subject: [PATCH] meta: bump step-security/harden-runner from 2.3.1 to 2.4.0 PR-URL: https://github.com/nodejs/node/pull/47980 Reviewed-By: Mestery Reviewed-By: Mohammed Keyvanzadeh --- .github/workflows/scorecard.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index e1ccfe0242ae1f..3f00950b2ab0e4 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -33,7 +33,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@6b3083af2869dc3314a0257a42f4af696cc79ba3 # v2.3.1 + uses: step-security/harden-runner@128a63446a954579617e875aaab7d2978154e969 # v2.4.0 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs