Skip to content

Bump step-security/harden-runner from 2.8.1 to 2.9.0 #265

Bump step-security/harden-runner from 2.8.1 to 2.9.0

Bump step-security/harden-runner from 2.8.1 to 2.9.0 #265

name: "Dependency Review"
on:
pull_request:
branches:
- main
permissions:
contents: read
jobs:
dependency-review:
runs-on: ubuntu-latest
steps:
- name: Harden Runner
uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c # v2.9.0
with:
egress-policy: audit
- name: "Checkout Repository"
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- name: "Dependency Review"
uses: actions/dependency-review-action@5a2ce3f5b92ee19cbb1541a4984c76d921601d7c # v4.3.4