From 59eba82f2c6a657cc070eb70d78a5bcb58a77e49 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 6 Nov 2026 20:00:24 +0000 Subject: [PATCH] chore: update step-security/harden-runner action to v2.22.4 Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/pr-build.yml | 2 +- .github/workflows/site-build.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/pr-build.yml b/.github/workflows/pr-build.yml index 4a9603715..0a1591dca 100644 --- a/.github/workflows/pr-build.yml +++ b/.github/workflows/pr-build.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 + - uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: disable-sudo-and-containers: true egress-policy: block diff --git a/.github/workflows/site-build.yml b/.github/workflows/site-build.yml index 1e8d9d072..1a2cb93c1 100644 --- a/.github/workflows/site-build.yml +++ b/.github/workflows/site-build.yml @@ -25,7 +25,7 @@ jobs: contents: write steps: - - uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 + - uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: disable-sudo-and-containers: true egress-policy: block @@ -96,7 +96,7 @@ jobs: needs: [build] steps: - - uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 + - uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: audit allowed-endpoints: >