remove step security (#560)

panther-labs · Jan 15, 2025 · 0646a96 · 0646a96
1 parent fcc3df9
commit 0646a96
Show file tree

Hide file tree

Showing 4 changed files with 0 additions and 28 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -8,15 +8,6 @@ jobs:
     if: ${{ github.actor != 'panther-bot-automation' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
-        with:
-          disable-sudo: true
-          egress-policy: block
-          allowed-endpoints: >
-            files.pythonhosted.org:443
-            github.com:443
-            ipinfo.io:443
-            pypi.org:443
       - name: Checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - name: Setup Python

diff --git a/.github/workflows/fmt.yml b/.github/workflows/fmt.yml
@@ -15,18 +15,6 @@ jobs:
     if: ${{ github.actor != 'panther-bot-automation' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
-        with:
-          disable-sudo: true
-          egress-policy: block
-          allowed-endpoints: >
-            files.pythonhosted.org:443
-            fulcio.sigstore.dev:443
-            github.com:443
-            objects.githubusercontent.com:443
-            pypi.org:443
-            rekor.sigstore.dev:443
-            tuf-repo-cdn.sigstore.dev:443
       - name: Checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
 

diff --git a/.github/workflows/test_release_publish.yml b/.github/workflows/test_release_publish.yml
@@ -11,10 +11,6 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
-      with:
-        egress-policy: audit
-
     - name: Check out the repository
       uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       with:

diff --git a/.github/workflows/version_bump_pr.yml b/.github/workflows/version_bump_pr.yml
@@ -16,9 +16,6 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
-      with:
-        egress-policy: audit
     - name: Check out the repository
       uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       with: