From b41b0e1ce4fcbbab69d3ee88387aca45554a3866 Mon Sep 17 00:00:00 2001 From: shionit Date: Sun, 10 May 2026 17:13:25 +0700 Subject: [PATCH] fix: correct harden-runner SHA to v2.19.1 --- .github/workflows/devcontainer-ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/devcontainer-ci.yml b/.github/workflows/devcontainer-ci.yml index 35bc1fc..d4f5d15 100644 --- a/.github/workflows/devcontainer-ci.yml +++ b/.github/workflows/devcontainer-ci.yml @@ -36,7 +36,7 @@ jobs: # have confirmed all required hosts in the audit logs. # SHA pinned; Renovate keeps this up to date (see .github/renovate.json). - name: Harden Runner - uses: step-security/harden-runner@ec9f347b7fe90c3e21c3dcc695e6a78f01c4d23d # v2.10.4 + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 with: egress-policy: audit