step-security/harden-runner
1
0
Fork 0
mirror of https://github.com/step-security/harden-runner.git synced 2026-06-07 12:17:08 +00:00
Code Issues Projects Releases Packages Wiki Activity

[StepSecurity] Remediate missing harden runner security issue in .github/workflows/recurring-int-tests.yml

Browse source
This commit is contained in:
Step Security 2022-08-15 22:53:11 +00:00
commit f5669ff9f5
1 changed files with 6 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
.github/workflows/recurring-int-tests.yml vendored
View file

@ -12,8 +12,13 @@ jobs:
name: int tests
runs-on: ubuntu-latest
steps:
- name: Harden Runner
uses: step-security/harden-runner@dd2c410b088af7c0dc8046f3ac9a8f4148492a95
with:
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
- name: Canary test
uses: docker://ghcr.io/step-security/integration-test/int:latest
uses: docker://ghcr.io/step-security/integration-test/int@sha256:a0e71f0f02a1298be8e34914f4d28df8e43275e63921faa4ee629822b376bd02 # latest
env:
PAT: ${{ secrets.PAT }}
canary: true