From 258e5a69bb281b6bf69e06fb0e4696d1993cf43c Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 31 Aug 2026 02:11:42 +0000 Subject: [PATCH] chore: update step-security/harden-runner action to v2.21.1 Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/pr-build.yml | 2 +- .github/workflows/site-build.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/pr-build.yml b/.github/workflows/pr-build.yml index 3d8ce4778..e5b7b01c2 100644 --- a/.github/workflows/pr-build.yml +++ b/.github/workflows/pr-build.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 + - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 with: disable-sudo-and-containers: true egress-policy: block diff --git a/.github/workflows/site-build.yml b/.github/workflows/site-build.yml index 157e681da..c80312ffc 100644 --- a/.github/workflows/site-build.yml +++ b/.github/workflows/site-build.yml @@ -25,7 +25,7 @@ jobs: contents: write steps: - - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 + - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 with: disable-sudo-and-containers: true egress-policy: block @@ -96,7 +96,7 @@ jobs: needs: [build] steps: - - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 + - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 with: egress-policy: audit allowed-endpoints: >