Skip to content

chore(deps): update step-security/harden-runner action to v2.12.1#135

Merged
reyang merged 1 commit intomainfrom
renovate/all-patch-versions
Jun 12, 2025
Merged

chore(deps): update step-security/harden-runner action to v2.12.1#135
reyang merged 1 commit intomainfrom
renovate/all-patch-versions

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jun 12, 2025

This PR contains the following updates:

Package Type Update Change
step-security/harden-runner action patch v2.12.0 -> v2.12.1

Release Notes

step-security/harden-runner (step-security/harden-runner)

v2.12.1

Compare Source

What's Changed
  • Detection capabilities have been upgraded to better recognize attempts at runner tampering. These improvements are informed by real-world incident learnings, including analysis of anomalous behaviors observed in the tj-actions and reviewdog supply chain attack.
  • Resolved an issue where the block policy was not enforced correctly when the GitHub Actions job was running inside a container on a self-hosted VM runner.

Full Changelog: step-security/harden-runner@v2...v2.12.1


Configuration

📅 Schedule: Branch creation - "before 8am every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner June 12, 2025 03:39
@reyang reyang merged commit 6d83d27 into main Jun 12, 2025
8 checks passed
@reyang reyang deleted the renovate/all-patch-versions branch June 12, 2025 08:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant