We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
2 parents 284cf2d + f1620dc commit 3e6f037Copy full SHA for 3e6f037
1 file changed
.github/workflows/lint.yaml
@@ -16,6 +16,11 @@ jobs:
16
contents: read
17
18
steps:
19
+ - name: Harden the runner (Audit all outbound calls)
20
+ uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
21
+ with:
22
+ egress-policy: audit
23
+
24
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2
25
- uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
26
- uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1
0 commit comments