step-security/harden-runner
1
0
Fork 0
mirror of synced 2026-06-05 14:58:19 +00:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #37 from step-security/sha256

Browse source 
Use SHA 256 to verify tools
This commit is contained in:
Varun Sharma 2021-12-14 11:19:20 -08:00 • committed by GitHub
commit 99f91e6554
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
4 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
dist/pre/index.js vendored
View file

@ -6309,7 +6309,7 @@ var __awaiter = (undefined && undefined.__awaiter) || function (thisArg, _argume
const confgStr = JSON.stringify(confg); const confgStr = JSON.stringify(confg);
external_child_process_.execSync("sudo mkdir -p /home/agent"); external_child_process_.execSync("sudo mkdir -p /home/agent");
external_child_process_.execSync("sudo chown -R $USER /home/agent"); external_child_process_.execSync("sudo chown -R $USER /home/agent");
const downloadPath = yield tool_cache.downloadTool("https://github.com/step-security/agent/releases/download/v0.4.0/agent_0.4.0_linux_amd64.tar.gz"); const downloadPath = yield tool_cache.downloadTool("https://github.com/step-security/agent/releases/download/v0.4.1/agent_0.4.1_linux_amd64.tar.gz");
const extractPath = yield tool_cache.extractTar(downloadPath); const extractPath = yield tool_cache.extractTar(downloadPath);
console.log(`Step Security Job Correlation ID: ${correlation_id}`); console.log(`Step Security Job Correlation ID: ${correlation_id}`);
printInfo(web_url); printInfo(web_url);

2
dist/pre/index.js.map vendored
View file

File diff suppressed because one or more lines are too long

2
package.json
View file

@ -1,6 +1,6 @@
{ {
"name": "step-security-harden-runner", "name": "step-security-harden-runner",
"version": "1.0.0", "version": "1.0.1",
"description": "GitHub Actions Runtime Security", "description": "GitHub Actions Runtime Security",
"main": "index.js", "main": "index.js",
"scripts": { "scripts": {

2
src/setup.ts
View file

@ -49,7 +49,7 @@ import * as tc from "@actions/tool-cache";
cp.execSync("sudo chown -R $USER /home/agent"); cp.execSync("sudo chown -R $USER /home/agent");
const downloadPath: string = await tc.downloadTool( const downloadPath: string = await tc.downloadTool(
"https://github.com/step-security/agent/releases/download/v0.4.0/agent_0.4.0_linux_amd64.tar.gz" "https://github.com/step-security/agent/releases/download/v0.4.1/agent_0.4.1_linux_amd64.tar.gz"
); );
const extractPath = await tc.extractTar(downloadPath); const extractPath = await tc.extractTar(downloadPath);