step-security/harden-runner
1
0
Fork 0
mirror of synced 2026-06-05 16:24:04 +00:00
Code Issues Projects Releases Packages Wiki Activity

Skip echo-based policy when deploy-on-self-hosted-vm installs the agent

Browse source 
When the agent is installed via deploy-on-self-hosted-vm, the config
already contains egress_policy and allowed_endpoints. Skip the
sendAllowedEndpoints echo to avoid a second applyEgressPolicy that
may interfere with the config-based block policy.
This commit is contained in:
Varun Sharma 2026-04-14 23:05:18 -07:00
commit d2d83c9c60
3 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
dist/pre/index.js vendored
View file

@ -85919,7 +85919,7 @@ var __rest = (undefined && undefined.__rest) || function (s, e) {
lib_core.info("Agent already installed on self-hosted runner, skipping installation."); lib_core.info("Agent already installed on self-hosted runner, skipping installation.");
} }
} }
if (confg.egress_policy === "block") { if (confg.egress_policy === "block" && !confg.deploy_on_self_hosted_vm) {
sendAllowedEndpoints(confg.allowed_endpoints); sendAllowedEndpoints(confg.allowed_endpoints);
yield setup_sleep(5000); yield setup_sleep(5000);
} }

2
dist/pre/index.js.map vendored
View file

File diff suppressed because one or more lines are too long

2
src/setup.ts
View file

@ -314,7 +314,7 @@ interface MonitorResponse {
} }
} }
if (confg.egress_policy === "block") { if (confg.egress_policy === "block" && !confg.deploy_on_self_hosted_vm) {
sendAllowedEndpoints(confg.allowed_endpoints); sendAllowedEndpoints(confg.allowed_endpoints);
await sleep(5000); await sleep(5000);
} }