diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 05a7917..c9cf226 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -18,7 +18,7 @@ jobs: permissions: contents: read # Clone the repository steps: - - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 + - uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1 with: egress-policy: audit - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 diff --git a/.github/workflows/contributors.yml b/.github/workflows/contributors.yml index 55373d9..fb42eab 100644 --- a/.github/workflows/contributors.yml +++ b/.github/workflows/contributors.yml @@ -14,7 +14,7 @@ jobs: discussions: write # Create the monthly thank-you discussion via abirismyname/create-discussion steps: - - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 + - uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1 with: egress-policy: audit @@ -32,7 +32,7 @@ jobs: echo "END_DATE=$end_date" >> "$GITHUB_ENV" - name: Run contributor action - uses: github-community-projects/contributors@7e077779e5e7bf810cc722e15b38ee63f86b880e # v2.0.18 + uses: github-community-projects/contributors@e1118bad7bd389d10b53b363142a11245cbaa9f8 # v2.0.19 env: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} START_DATE: ${{ env.START_DATE }}