Update Harden Runner step in node workflows

This commit is contained in:
Shivam Mathur 2021-12-07 21:26:23 +05:30
parent be75d5e01d
commit cecf84878d
No known key found for this signature in database
GPG Key ID: 3E13E4C8591ACC2A
2 changed files with 7 additions and 4 deletions

View File

@ -18,7 +18,12 @@ jobs:
packages: write
steps:
- name: Harden Runner
uses: step-security/harden-runner@main
uses: step-security/harden-runner@v1
with:
allowed-endpoints:
github.com:443
npm.pkg.github.com:443
registry.npmjs.org:443
- name: Checkout release
if: github.event_name != 'workflow_dispatch'

View File

@ -26,11 +26,9 @@ jobs:
operating-system: [ubuntu-latest, windows-latest, macos-latest]
steps:
- name: Harden Runner
if: runner.os == 'Linux'
uses: step-security/harden-runner@main
uses: step-security/harden-runner@v1
with:
allowed-endpoints:
beta.api.stepsecurity.io.:443
codecov.io.:443
github.com.:443
nodejs.org.:443