34
34
tailnet-integration :${{ steps.filter.outputs.tailnet-integration }}
35
35
steps :
36
36
-name :Harden Runner
37
- uses :step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
37
+ uses :step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
38
38
with :
39
39
egress-policy :audit
40
40
@@ -155,7 +155,7 @@ jobs:
155
155
runs-on :${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' || 'ubuntu-latest' }}
156
156
steps :
157
157
-name :Harden Runner
158
- uses :step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
158
+ uses :step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
159
159
with :
160
160
egress-policy :audit
161
161
@@ -227,7 +227,7 @@ jobs:
227
227
if :always()
228
228
steps :
229
229
-name :Harden Runner
230
- uses :step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
230
+ uses :step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
231
231
with :
232
232
egress-policy :audit
233
233
@@ -282,7 +282,7 @@ jobs:
282
282
timeout-minutes :7
283
283
steps :
284
284
-name :Harden Runner
285
- uses :step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
285
+ uses :step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
286
286
with :
287
287
egress-policy :audit
288
288
@@ -326,7 +326,7 @@ jobs:
326
326
-windows-2022
327
327
steps :
328
328
-name :Harden Runner
329
- uses :step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
329
+ uses :step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
330
330
with :
331
331
egress-policy :audit
332
332
@@ -397,7 +397,7 @@ jobs:
397
397
-windows-2022
398
398
steps :
399
399
-name :Harden Runner
400
- uses :step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
400
+ uses :step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
401
401
with :
402
402
egress-policy :audit
403
403
@@ -453,7 +453,7 @@ jobs:
453
453
-ubuntu-latest
454
454
steps :
455
455
-name :Harden Runner
456
- uses :step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
456
+ uses :step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
457
457
with :
458
458
egress-policy :audit
459
459
@@ -521,7 +521,7 @@ jobs:
521
521
timeout-minutes :25
522
522
steps :
523
523
-name :Harden Runner
524
- uses :step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
524
+ uses :step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
525
525
with :
526
526
egress-policy :audit
527
527
@@ -569,7 +569,7 @@ jobs:
569
569
timeout-minutes :25
570
570
steps :
571
571
-name :Harden Runner
572
- uses :step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
572
+ uses :step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
573
573
with :
574
574
egress-policy :audit
575
575
@@ -618,7 +618,7 @@ jobs:
618
618
timeout-minutes :25
619
619
steps :
620
620
-name :Harden Runner
621
- uses :step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
621
+ uses :step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
622
622
with :
623
623
egress-policy :audit
624
624
@@ -677,7 +677,7 @@ jobs:
677
677
timeout-minutes :20
678
678
steps :
679
679
-name :Harden Runner
680
- uses :step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
680
+ uses :step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
681
681
with :
682
682
egress-policy :audit
683
683
@@ -703,7 +703,7 @@ jobs:
703
703
timeout-minutes :20
704
704
steps :
705
705
-name :Harden Runner
706
- uses :step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
706
+ uses :step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
707
707
with :
708
708
egress-policy :audit
709
709
@@ -735,7 +735,7 @@ jobs:
735
735
name :${{ matrix.variant.name }}
736
736
steps :
737
737
-name :Harden Runner
738
- uses :step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
738
+ uses :step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
739
739
with :
740
740
egress-policy :audit
741
741
@@ -804,7 +804,7 @@ jobs:
804
804
if :needs.changes.outputs.ts == 'true' || needs.changes.outputs.ci == 'true'
805
805
steps :
806
806
-name :Harden Runner
807
- uses :step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
807
+ uses :step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
808
808
with :
809
809
egress-policy :audit
810
810
@@ -881,7 +881,7 @@ jobs:
881
881
882
882
steps :
883
883
-name :Harden Runner
884
- uses :step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
884
+ uses :step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
885
885
with :
886
886
egress-policy :audit
887
887
@@ -950,7 +950,7 @@ jobs:
950
950
if :always()
951
951
steps :
952
952
-name :Harden Runner
953
- uses :step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
953
+ uses :step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
954
954
with :
955
955
egress-policy :audit
956
956
@@ -1080,7 +1080,7 @@ jobs:
1080
1080
IMAGE :ghcr.io/coder/coder-preview:${{ steps.build-docker.outputs.tag }}
1081
1081
steps :
1082
1082
-name :Harden Runner
1083
- uses :step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
1083
+ uses :step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
1084
1084
with :
1085
1085
egress-policy :audit
1086
1086
@@ -1137,7 +1137,7 @@ jobs:
1137
1137
# Setup GCloud for signing Windows binaries.
1138
1138
-name :Authenticate to Google Cloud
1139
1139
id :gcloud_auth
1140
- uses :google-github-actions/auth@71f986410dfbc7added4569d411d040a91dc6935 # v2.1.8
1140
+ uses :google-github-actions/auth@ba79af03959ebeac9769e648f473a284504d9193 # v2.1.10
1141
1141
with :
1142
1142
workload_identity_provider :${{ secrets.GCP_CODE_SIGNING_WORKLOAD_ID_PROVIDER }}
1143
1143
service_account :${{ secrets.GCP_CODE_SIGNING_SERVICE_ACCOUNT }}
@@ -1147,7 +1147,7 @@ jobs:
1147
1147
uses :google-github-actions/setup-gcloud@77e7a554d41e2ee56fc945c52dfd3f33d12def9a # v2.1.4
1148
1148
1149
1149
-name :Download dylibs
1150
- uses :actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
1150
+ uses :actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
1151
1151
with :
1152
1152
name :dylibs
1153
1153
path :./build
@@ -1264,7 +1264,7 @@ jobs:
1264
1264
id :attest_main
1265
1265
if :github.ref == 'refs/heads/main'
1266
1266
continue-on-error :true
1267
- uses :actions/attest@a63cfcc7d1aab266ee064c58250cfc2c7d07bc31 # v2.2.1
1267
+ uses :actions/attest@afd638254319277bb3d7f0a234478733e2e46a73 # v2.3.0
1268
1268
with :
1269
1269
subject-name :" ghcr.io/coder/coder-preview:main"
1270
1270
predicate-type :" https://slsa.dev/provenance/v1"
@@ -1301,7 +1301,7 @@ jobs:
1301
1301
id :attest_latest
1302
1302
if :github.ref == 'refs/heads/main'
1303
1303
continue-on-error :true
1304
- uses :actions/attest@a63cfcc7d1aab266ee064c58250cfc2c7d07bc31 # v2.2.1
1304
+ uses :actions/attest@afd638254319277bb3d7f0a234478733e2e46a73 # v2.3.0
1305
1305
with :
1306
1306
subject-name :" ghcr.io/coder/coder-preview:latest"
1307
1307
predicate-type :" https://slsa.dev/provenance/v1"
@@ -1338,7 +1338,7 @@ jobs:
1338
1338
id :attest_version
1339
1339
if :github.ref == 'refs/heads/main'
1340
1340
continue-on-error :true
1341
- uses :actions/attest@a63cfcc7d1aab266ee064c58250cfc2c7d07bc31 # v2.2.1
1341
+ uses :actions/attest@afd638254319277bb3d7f0a234478733e2e46a73 # v2.3.0
1342
1342
with :
1343
1343
subject-name :" ghcr.io/coder/coder-preview:${{ steps.build-docker.outputs.tag }}"
1344
1344
predicate-type :" https://slsa.dev/provenance/v1"
@@ -1426,7 +1426,7 @@ jobs:
1426
1426
id-token :write
1427
1427
steps :
1428
1428
-name :Harden Runner
1429
- uses :step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
1429
+ uses :step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
1430
1430
with :
1431
1431
egress-policy :audit
1432
1432
@@ -1436,7 +1436,7 @@ jobs:
1436
1436
fetch-depth :0
1437
1437
1438
1438
-name :Authenticate to Google Cloud
1439
- uses :google-github-actions/auth@71f986410dfbc7added4569d411d040a91dc6935 # v2.1.8
1439
+ uses :google-github-actions/auth@ba79af03959ebeac9769e648f473a284504d9193 # v2.1.10
1440
1440
with :
1441
1441
workload_identity_provider :projects/573722524737/locations/global/workloadIdentityPools/github/providers/github
1442
1442
service_account :coder-ci@coder-dogfood.iam.gserviceaccount.com
@@ -1490,7 +1490,7 @@ jobs:
1490
1490
if :github.ref == 'refs/heads/main' && !github.event.pull_request.head.repo.fork
1491
1491
steps :
1492
1492
-name :Harden Runner
1493
- uses :step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
1493
+ uses :step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
1494
1494
with :
1495
1495
egress-policy :audit
1496
1496
@@ -1525,7 +1525,7 @@ jobs:
1525
1525
if :needs.changes.outputs.db == 'true' || needs.changes.outputs.ci == 'true' || github.ref == 'refs/heads/main'
1526
1526
steps :
1527
1527
-name :Harden Runner
1528
- uses :step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
1528
+ uses :step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
1529
1529
with :
1530
1530
egress-policy :audit
1531
1531