diff --git a/.github/workflows/auto-labeler.yaml b/.github/workflows/auto-labeler.yaml index fcacd29..d8f1d96 100644 --- a/.github/workflows/auto-labeler.yaml +++ b/.github/workflows/auto-labeler.yaml @@ -11,7 +11,7 @@ jobs: permissions: contents: write pull-requests: write - uses: github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml@e92cb6053ace495fe40a5f185988557afcdcecbc # v1.0.1 + uses: github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml@6d7a83e6fc8275128984b0ed3defa4b8cdc40f85 # v1.1.0 with: config-name: release-drafter.yaml secrets: diff --git a/.github/workflows/mark-ready-when-ready.yaml b/.github/workflows/mark-ready-when-ready.yaml index 19cab7b..83df844 100644 --- a/.github/workflows/mark-ready-when-ready.yaml +++ b/.github/workflows/mark-ready-when-ready.yaml @@ -25,7 +25,7 @@ jobs: github.event.pull_request.draft == true steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/pr-title.yaml b/.github/workflows/pr-title.yaml index 9ffb152..25f2df1 100644 --- a/.github/workflows/pr-title.yaml +++ b/.github/workflows/pr-title.yaml @@ -12,6 +12,6 @@ jobs: contents: read pull-requests: read statuses: write - uses: github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml@e92cb6053ace495fe40a5f185988557afcdcecbc # v1.0.1 + uses: github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml@6d7a83e6fc8275128984b0ed3defa4b8cdc40f85 # v1.1.0 secrets: github-token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/shellcheck.yaml b/.github/workflows/shellcheck.yaml index 8d6d4b1..41db68f 100644 --- a/.github/workflows/shellcheck.yaml +++ b/.github/workflows/shellcheck.yaml @@ -11,7 +11,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/stale.yaml b/.github/workflows/stale.yaml index ccf176f..6021501 100644 --- a/.github/workflows/stale.yaml +++ b/.github/workflows/stale.yaml @@ -14,7 +14,7 @@ jobs: pull-requests: read steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit