diff options
| author | StepSecurity Bot <bot@stepsecurity.io> | 2025-09-19 08:30:10 -0700 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-09-19 17:30:10 +0200 |
| commit | 7f3d8a34e2d850b51782f0900151413b435296d4 (patch) | |
| tree | 60b8020323f03653c225fdbc69011eb3afb3d4e8 /.github/workflows/installer.yml | |
| parent | c87eb79140ac359cf4f71604ddbf7209e1282939 (diff) | |
| download | zsh-7f3d8a34e2d850b51782f0900151413b435296d4.tar.gz zsh-7f3d8a34e2d850b51782f0900151413b435296d4.tar.bz2 zsh-7f3d8a34e2d850b51782f0900151413b435296d4.zip | |
ci: Harden GitHub Actions [StepSecurity] (#13318)
Diffstat (limited to '.github/workflows/installer.yml')
| -rw-r--r-- | .github/workflows/installer.yml | 14 |
1 files changed, 12 insertions, 2 deletions
diff --git a/.github/workflows/installer.yml b/.github/workflows/installer.yml index 9e933350f..2d1de706a 100644 --- a/.github/workflows/installer.yml +++ b/.github/workflows/installer.yml @@ -25,8 +25,13 @@ jobs: - ubuntu-latest - macos-latest steps: + - name: Harden the runner (Audit all outbound calls) + uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1 + with: + egress-policy: audit + - name: Set up git repository - uses: actions/checkout@v5 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Install zsh if: runner.os == 'Linux' run: sudo apt-get update; sudo apt-get install zsh @@ -41,8 +46,13 @@ jobs: needs: - test steps: + - name: Harden the runner (Audit all outbound calls) + uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1 + with: + egress-policy: audit + - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Install Vercel CLI run: npm install -g vercel - name: Setup project and deploy |