step-security/harden-runner
1
0
Fork 0
mirror of https://github.com/step-security/harden-runner.git synced 2026-06-07 15:17:12 +00:00
Code Issues Projects Releases Packages Wiki Activity

Update canary.yml

Browse source 
Update action to use commit hashes and digests.
This commit is contained in:
Jauder Ho 2022-01-29 05:26:38 +00:00 • committed by GitHub
commit d3d4d49038
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
.github/workflows/canary.yml vendored
View file

@ -19,13 +19,13 @@ jobs:
permissions:
contents: write
steps:
- uses: step-security/harden-runner@v1
- uses: step-security/harden-runner@14dc64f30986eaa2ad2dddcec073f5aab18e5a24 # v1
with:
allowed-endpoints:
api.github.com:443
github.com:443
- uses: actions/checkout@v2
- uses: actions/checkout@629c2de402a417ea7690ca6ce3f33229e27606a5 # v2
- name: Update the rc tag
uses: step-security/publish-action@b438f840875fdcb7d1de4fc3d1d30e86cf6acb5d
with:
@ -33,7 +33,7 @@ jobs:
rc: true
- name: Canary test
uses: docker://ghcr.io/step-security/integration-test/int:latest
uses: docker://ghcr.io/step-security/integration-test/int@sha256:f1f95204dc1f12a41eaf41080185e2d289596b3e7637a8c50a3f6fbe17f99649
env:
PAT: ${{ secrets.PAT }}
canary: true
canary: true