1
0
Fork 0
mirror of synced 2026-06-05 19:28:19 +00:00
harden-runner/.github/workflows/publish-immutable-actions.yml
stepsecurity-app[bot] cdd8e86cf3
[StepSecurity] Apply security best practices
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
2025-03-25 11:15:49 +00:00

28 lines
No EOL
650 B
YAML

name: 'Publish Immutable Action Version'
on:
release:
types: [published]
permissions:
contents: read
jobs:
publish:
runs-on: ubuntu-latest
permissions:
contents: read
id-token: write
packages: write
steps:
- name: Harden the runner (Audit all outbound calls)
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
with:
egress-policy: audit
- name: Checking out
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Publish
id: publish
uses: actions/publish-immutable-action@0.0.4