mirror of
https://github.com/shivammathur/setup-php.git
synced 2024-11-26 21:33:06 +07:00
Update Harden Runner step in node workflows
This commit is contained in:
parent
be75d5e01d
commit
cecf84878d
7
.github/workflows/node-release.yml
vendored
7
.github/workflows/node-release.yml
vendored
@ -18,7 +18,12 @@ jobs:
|
|||||||
packages: write
|
packages: write
|
||||||
steps:
|
steps:
|
||||||
- name: Harden Runner
|
- name: Harden Runner
|
||||||
uses: step-security/harden-runner@main
|
uses: step-security/harden-runner@v1
|
||||||
|
with:
|
||||||
|
allowed-endpoints:
|
||||||
|
github.com:443
|
||||||
|
npm.pkg.github.com:443
|
||||||
|
registry.npmjs.org:443
|
||||||
|
|
||||||
- name: Checkout release
|
- name: Checkout release
|
||||||
if: github.event_name != 'workflow_dispatch'
|
if: github.event_name != 'workflow_dispatch'
|
||||||
|
4
.github/workflows/node-workflow.yml
vendored
4
.github/workflows/node-workflow.yml
vendored
@ -26,11 +26,9 @@ jobs:
|
|||||||
operating-system: [ubuntu-latest, windows-latest, macos-latest]
|
operating-system: [ubuntu-latest, windows-latest, macos-latest]
|
||||||
steps:
|
steps:
|
||||||
- name: Harden Runner
|
- name: Harden Runner
|
||||||
if: runner.os == 'Linux'
|
uses: step-security/harden-runner@v1
|
||||||
uses: step-security/harden-runner@main
|
|
||||||
with:
|
with:
|
||||||
allowed-endpoints:
|
allowed-endpoints:
|
||||||
beta.api.stepsecurity.io.:443
|
|
||||||
codecov.io.:443
|
codecov.io.:443
|
||||||
github.com.:443
|
github.com.:443
|
||||||
nodejs.org.:443
|
nodejs.org.:443
|
||||||
|
Loading…
Reference in New Issue
Block a user