CI: Change rules for harden-runner job in codeql (#245)

btschwertfeger · Jun 30, 2024 · 12f258e · 12f258e
1 parent d3efe88
commit 12f258e
Showing 1 changed file with 6 additions and 5 deletions.
diff --git a/.github/workflows/_codeql.yaml b/.github/workflows/_codeql.yaml
@@ -33,11 +33,12 @@ jobs:
       - name: Harden Runner
         uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
         with:
-          disable-sudo: true
-          egress-policy: block
-          allowed-endpoints: >
-            api.github.com:443
-            github.com:443
+          egress-policy: audit
+          # disable-sudo: true
+          # egress-policy: block
+          # allowed-endpoints: >
+          #   api.github.com:443
+          #   github.com:443
 
       - name: Checkout repository
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7