diff --git a/.github/workflows/ci-vcpkg.yml b/.github/workflows/ci-vcpkg.yml index ab18ae2..da39ac1 100644 --- a/.github/workflows/ci-vcpkg.yml +++ b/.github/workflows/ci-vcpkg.yml @@ -30,11 +30,6 @@ jobs: VCPKG_DEFAULT_TRIPLET: ${{ matrix.triplet }} VCPKG_DEFAULT_HOST_TRIPLET: ${{ matrix.triplet }} steps: - - name: Harden Runner - uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0 - with: - egress-policy: audit - - name: Check out code uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index e48da1a..4604f5d 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -17,18 +17,6 @@ jobs: permissions: contents: read steps: - - name: Harden Runner - uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0 - with: - egress-policy: block - allowed-endpoints: > - api.github.com:443 - azure.archive.ubuntu.com:80 - esm.ubuntu.com:443 - github.com:443 - motd.ubuntu.com:443 - packages.microsoft.com:443 - - name: Check out code uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 diff --git a/.github/workflows/clang-tidy.yml b/.github/workflows/clang-tidy.yml index 9f8137a..f633428 100644 --- a/.github/workflows/clang-tidy.yml +++ b/.github/workflows/clang-tidy.yml @@ -17,19 +17,6 @@ jobs: permissions: contents: read steps: - - name: Harden Runner - uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0 - with: - egress-policy: block - allowed-endpoints: > - api.github.com:443 - azure.archive.ubuntu.com:80 - esm.ubuntu.com:443 - github.com:443 - motd.ubuntu.com:443 - objects.githubusercontent.com:443 - packages.microsoft.com:443 - - name: Check out the source code uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index d616f2e..0523eb3 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -27,20 +27,6 @@ jobs: - c-cpp - actions steps: - - name: Harden Runner - uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0 - with: - egress-policy: block - allowed-endpoints: > - api.github.com:443 - azure.archive.ubuntu.com:80 - esm.ubuntu.com:443 - github.com:443 - motd.ubuntu.com:443 - objects.githubusercontent.com:443 - packages.microsoft.com:443 - release-assets.githubusercontent.com:443 - - name: Check out code uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 9ee5e24..4cd41e8 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -25,16 +25,6 @@ jobs: permissions: contents: read steps: - - name: Harden Runner - uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0 - with: - disable-sudo: true - egress-policy: block - allowed-endpoints: > - ghcr.io:443 - github.com:443 - pkg-containers.githubusercontent.com:443 - - name: Check out code uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml index 05428ee..fdf5062 100644 --- a/.github/workflows/sonarcloud.yml +++ b/.github/workflows/sonarcloud.yml @@ -21,24 +21,6 @@ jobs: permissions: contents: read steps: - - name: Harden Runner - uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0 - with: - egress-policy: block - allowed-endpoints: - analysis-sensorcache-eu-central-1-prod.s3.amazonaws.com:443 - api.github.com:443 - api.nuget.org:443 - api.sonarcloud.io:443 - azure.archive.ubuntu.com:80 - binaries.sonarsource.com:443 - esm.ubuntu.com:443 - github.com:443 - motd.ubuntu.com:443 - packages.microsoft.com:443 - scanner.sonarcloud.io:443 - sonarcloud.io:443 - - name: Check out code uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: diff --git a/.github/workflows/update-vcpkg-baseline.yml b/.github/workflows/update-vcpkg-baseline.yml index 6966855..78a5610 100644 --- a/.github/workflows/update-vcpkg-baseline.yml +++ b/.github/workflows/update-vcpkg-baseline.yml @@ -16,11 +16,6 @@ jobs: contents: write pull-requests: write steps: - - name: Harden Runner - uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0 - with: - egress-policy: audit - - name: Check out code uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: