1515 runs-on : ubuntu-latest
1616 steps :
1717 - name : Harden the runner (Audit all outbound calls)
18- uses : step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1
18+ uses : step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2
1919 with :
2020 egress-policy : audit
2121
3535 timeout-minutes : 10
3636 steps :
3737 - name : Harden the runner (Audit all outbound calls)
38- uses : step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1
38+ uses : step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2
3939 with :
4040 egress-policy : audit
4141
4747 filter_triggers : ' '
4848
4949 - name : Upload SARIF file to GitHub
50- uses : github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
50+ uses : github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
5151 with :
5252 sarif_file : " ${{steps.octoscan.outputs.sarif_output}}"
5353 category : octoscan
6060 security-events : write # Required for codeql-action/upload-sarif to upload SARIF files.
6161 steps :
6262 - name : Harden the runner (Audit all outbound calls)
63- uses : step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1
63+ uses : step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2
6464 with :
6565 egress-policy : audit
6666
7373 uses : boostsecurityio/poutine-action@e240ebd3eff8b2db5a8e5f6b28f58739d7db2247 # v1.1.4
7474
7575 - name : Upload poutine SARIF file
76- uses : github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
76+ uses : github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
7777 with :
7878 sarif_file : results.sarif
7979 category : poutine
8686 security-events : write # Required for codeql-action/upload-sarif to upload SARIF files.
8787 steps :
8888 - name : Harden the runner (Audit all outbound calls)
89- uses : step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1
89+ uses : step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2
9090 with :
9191 egress-policy : audit
9292
@@ -106,7 +106,7 @@ jobs:
106106 GH_TOKEN : ${{ secrets.GITHUB_TOKEN }}
107107
108108 - name : Upload SARIF file
109- uses : github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
109+ uses : github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
110110 with :
111111 sarif_file : results.sarif
112112 category : zizmor
0 commit comments