paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 40 Packages Projects Releases Wiki Activity

PR Ready for Review

Browse Source 
Signed-off-by: NishkarshRaj <nishkarshraj000@gmail.com>
This commit is contained in:
NishkarshRaj
2023-10-09 15:48:02 +05:30
parent 971fcfba71
commit 595ed3b48e
41 changed files with 187 additions and 187 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/automate_area-labels.yml
+4 -4
View File
@@ -12,10 +12,10 @@ jobs:
pull-requests: write # for actions/labeler to add labels to PRs
runs-on: ubuntu-latest
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/labeler@v4.3.0
with:
.github/workflows/automate_changeset_feedback.yml
+4 -4
View File
@@ -22,10 +22,10 @@ jobs:
if: github.repository == 'backstage/backstage' && github.event.pull_request.user.login != 'backstage-service'
runs-on: ubuntu-latest
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/checkout@v3.6.0
with:
.github/workflows/automate_merge_message.yml
+4 -4
View File
@@ -23,10 +23,10 @@ jobs:
if: github.repository == 'backstage/backstage' && github.event.pull_request.merged == true
runs-on: ubuntu-latest
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/checkout@v3.6.0
with:
.github/workflows/automate_stale.yml
+4 -4
View File
@@ -14,10 +14,10 @@ jobs:
pull-requests: write # for actions/stale to close stale PRs
runs-on: ubuntu-latest
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/stale@v7.0.0
id: stale
.github/workflows/ci-noop.yml
+4 -4
View File
@@ -38,9 +38,9 @@ jobs:
name: Test ${{ matrix.node-version }}
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- run: echo NOOP
.github/workflows/ci.yml
+12 -12
View File
@@ -26,10 +26,10 @@ jobs:
name: Install ${{ matrix.node-version }}
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/checkout@v3.6.0
@@ -62,10 +62,10 @@ jobs:
name: Verify ${{ matrix.node-version }}
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/checkout@v3.6.0
@@ -196,10 +196,10 @@ jobs:
INTEGRATION_TEST_AZURE_TOKEN: ${{ secrets.INTEGRATION_TEST_AZURE_TOKEN }}
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/checkout@v3.6.0
- name: fetch branch master
.github/workflows/cron.yml
+4 -4
View File
@@ -8,10 +8,10 @@ jobs:
cron:
runs-on: ubuntu-latest
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: backstage/actions/cron@v0.6.4
with:
.github/workflows/deploy_docker-image.yml
+4 -4
View File
@@ -13,10 +13,10 @@ jobs:
node-version: [18.x]
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- name: checkout
uses: actions/checkout@v3.6.0
.github/workflows/deploy_microsite.yml
+4 -4
View File
@@ -23,10 +23,10 @@ jobs:
cancel-in-progress: true
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/checkout@v3.6.0
.github/workflows/deploy_nightly.yml
+4 -4
View File
@@ -14,10 +14,10 @@ jobs:
NODE_OPTIONS: --max-old-space-size=4096
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
.github/workflows/deploy_packages.yml
+8 -8
View File
@@ -60,10 +60,10 @@ jobs:
INTEGRATION_TEST_AZURE_TOKEN: ${{ secrets.INTEGRATION_TEST_AZURE_TOKEN }}
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/checkout@v3.6.0
@@ -142,10 +142,10 @@ jobs:
NODE_OPTIONS: --max-old-space-size=4096
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/checkout@v3.6.0
.github/workflows/issue.yaml
+4 -4
View File
@@ -9,10 +9,10 @@ jobs:
if: github.repository == 'backstage/backstage'
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- name: Issue sync
uses: backstage/actions/issue-sync@v0.6.4
.github/workflows/pr-review-comment-trigger.yaml
+4 -4
View File
@@ -19,10 +19,10 @@ jobs:
if: github.repository == 'backstage/backstage' && github.event.comment.user.id == github.event.pull_request.user.id
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- name: Save PR number
env:
.github/workflows/pr-review-comment.yaml
+4 -4
View File
@@ -16,10 +16,10 @@ jobs:
steps:
# Inspired by https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#using-data-from-the-triggering-workflow
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- name: Read PR Number
id: pr-number
.github/workflows/pr.yaml
+4 -4
View File
@@ -17,10 +17,10 @@ jobs:
# Avoid running on issue comments
if: github.repository == 'backstage/backstage' && ( github.event.pull_request || github.event.issue.pull_request )
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- name: PR sync
uses: backstage/actions/pr-sync@v0.6.4
.github/workflows/scorecard.yml
+4 -4
View File
@@ -28,10 +28,10 @@ jobs:
id-token: write
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- name: 'Checkout code'
uses: actions/checkout@v3.6.0
.github/workflows/sync_code-formatting.yml
+4 -4
View File
@@ -9,10 +9,10 @@ jobs:
name: Autofix Markdown files using Prettier
runs-on: ubuntu-latest
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
with:
.github/workflows/sync_dependabot-changesets.yml
+4 -4
View File
@@ -10,10 +10,10 @@ jobs:
runs-on: ubuntu-latest
if: github.actor == 'dependabot[bot]' && github.repository == 'backstage/backstage'
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- name: Checkout
uses: actions/checkout@v3.6.0
.github/workflows/sync_release-manifest.yml
+5 -5
View File
@@ -7,12 +7,12 @@ jobs:
create-new-version:
runs-on: ubuntu-latest
steps:
# Setup node & install deps before checkout, keeping install quick
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
# Setup node & install deps before checkout, keeping install quick
- uses: actions/setup-node@v3.8.1
with:
node-version: 18.x
.github/workflows/sync_renovate-changesets.yml
+4 -4
View File
@@ -10,10 +10,10 @@ jobs:
runs-on: ubuntu-latest
if: github.actor == 'renovate[bot]' && github.repository == 'backstage/backstage'
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- name: Checkout
uses: actions/checkout@v3.6.0
.github/workflows/sync_snyk-github-issues.yml
+4 -4
View File
@@ -11,10 +11,10 @@ jobs:
runs-on: ubuntu-latest
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/checkout@v3.6.0
.github/workflows/sync_snyk-monitor.yml
+4 -4
View File
@@ -24,10 +24,10 @@ jobs:
security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
runs-on: ubuntu-latest
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/checkout@v3.6.0
- name: Monitor and Synchronize Snyk Policies
.github/workflows/uffizzi-build.yml
+13 -13
View File
@@ -19,10 +19,10 @@ jobs:
outputs:
tags: ${{ steps.meta.outputs.tags }}
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- name: checkout
uses: actions/checkout@v3.6.0
@@ -81,10 +81,10 @@ jobs:
outputs:
compose-file-cache-key: ${{ steps.hash.outputs.hash }}
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- name: Checkout git repo
uses: actions/checkout@v3.6.0
@@ -113,12 +113,12 @@ jobs:
runs-on: ubuntu-latest
if: ${{ github.event.action == 'closed' }}
steps:
# If this PR is closing, we will not render a compose file nor pass it to the next workflow.
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
# If this PR is closing, we will not render a compose file nor pass it to the next workflow.
- name: Upload PR Event as Artifact
uses: actions/upload-artifact@v3.1.3
with:
.github/workflows/uffizzi-preview.yaml
+4 -4
View File
@@ -17,10 +17,10 @@ jobs:
git-ref: ${{ env.GIT_REF }}
pr-number: ${{ env.PR_NUMBER }}
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- name: 'Download artifacts'
# Fetch output (zip archive) from the workflow run that triggered this workflow.
.github/workflows/verify_accessibility-noop.yml
+4 -4
View File
@@ -25,9 +25,9 @@ jobs:
name: Accessibility
runs-on: ubuntu-latest
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- run: echo NOOP
.github/workflows/verify_accessibility.yml
+4 -4
View File
@@ -19,10 +19,10 @@ jobs:
name: Accessibility
runs-on: ubuntu-latest
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/checkout@v3.6.0
- name: Use Node.js 18.x
.github/workflows/verify_codeql.yml
+4 -4
View File
@@ -41,10 +41,10 @@ jobs:
# https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- name: Checkout repository
uses: actions/checkout@v3.6.0
.github/workflows/verify_docs-quality.yml
+4 -4
View File
@@ -11,10 +11,10 @@ jobs:
runs-on: ubuntu-latest
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/checkout@v3.6.0
.github/workflows/verify_e2e-kubernetes-noop.yml
+4 -4
View File
@@ -22,9 +22,9 @@ jobs:
name: Kubernetes ${{ matrix.node-version }}
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- run: echo NOOP
.github/workflows/verify_e2e-kubernetes.yml
+4 -4
View File
@@ -21,10 +21,10 @@ jobs:
name: Kubernetes ${{ matrix.node-version }}
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/checkout@v3.6.0
.github/workflows/verify_e2e-linux-noop.yml
+4 -4
View File
@@ -27,9 +27,9 @@ jobs:
name: E2E Linux ${{ matrix.node-version }}
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- run: echo NOOP
.github/workflows/verify_e2e-linux.yml
+4 -4
View File
@@ -39,10 +39,10 @@ jobs:
name: E2E Linux ${{ matrix.node-version }}
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/checkout@v3.6.0
.github/workflows/verify_e2e-techdocs.yml
+4 -4
View File
@@ -29,10 +29,10 @@ jobs:
name: Techdocs
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/checkout@v3.6.0
- uses: actions/setup-python@v4.7.0
.github/workflows/verify_e2e-windows-noop.yml
+4 -4
View File
@@ -24,9 +24,9 @@ jobs:
name: E2E Windows ${{ matrix.node-version }}
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- run: echo NOOP
.github/workflows/verify_e2e-windows.yml
+5 -5
View File
@@ -30,13 +30,13 @@ jobs:
name: E2E Windows ${{ matrix.node-version }}
steps:
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
# In order to have the create-app template function as if it was downloaded from NPM
# we need to make sure we checkout files with LF line endings only
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Set git to use LF
run: |
git config --global core.autocrlf false
.github/workflows/verify_fossa.yml
+4 -4
View File
@@ -13,10 +13,10 @@ jobs:
runs-on: ubuntu-latest
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- name: Checkout
uses: actions/checkout@v3.6.0
.github/workflows/verify_microsite-noop.yml
+4 -4
View File
@@ -20,9 +20,9 @@ jobs:
name: Microsite
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- run: echo NOOP
.github/workflows/verify_microsite.yml
+4 -4
View File
@@ -23,10 +23,10 @@ jobs:
name: Microsite
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/checkout@v3.6.0
.github/workflows/verify_storybook-noop.yml
+4 -4
View File
@@ -27,9 +27,9 @@ jobs:
name: Storybook
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- run: echo NOOP
.github/workflows/verify_storybook.yml
+4 -4
View File
@@ -27,10 +27,10 @@ jobs:
name: Storybook
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/checkout@v3.6.0
with:
.github/workflows/verify_windows.yml
+4 -4
View File
@@ -28,10 +28,10 @@ jobs:
INTEGRATION_TEST_AZURE_TOKEN: ${{ secrets.INTEGRATION_TEST_AZURE_TOKEN }}
steps:
# - name: Harden Runner
# uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
# with:
# egress-policy: audit
- name: Harden Runner
uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
with:
egress-policy: audit
- uses: actions/checkout@v3.6.0