diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 7d92a0f7..2fe9303e 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -8,15 +8,6 @@ jobs: if: ${{ github.actor != 'panther-bot-automation' }} runs-on: ubuntu-latest steps: - - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 - with: - disable-sudo: true - egress-policy: block - allowed-endpoints: > - files.pythonhosted.org:443 - github.com:443 - ipinfo.io:443 - pypi.org:443 - name: Checkout uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 - name: Setup Python diff --git a/.github/workflows/fmt.yml b/.github/workflows/fmt.yml index 03937209..fea0cde8 100644 --- a/.github/workflows/fmt.yml +++ b/.github/workflows/fmt.yml @@ -15,18 +15,6 @@ jobs: if: ${{ github.actor != 'panther-bot-automation' }} runs-on: ubuntu-latest steps: - - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 - with: - disable-sudo: true - egress-policy: block - allowed-endpoints: > - files.pythonhosted.org:443 - fulcio.sigstore.dev:443 - github.com:443 - objects.githubusercontent.com:443 - pypi.org:443 - rekor.sigstore.dev:443 - tuf-repo-cdn.sigstore.dev:443 - name: Checkout uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 diff --git a/.github/workflows/test_release_publish.yml b/.github/workflows/test_release_publish.yml index 28e687b1..2f2a3af7 100644 --- a/.github/workflows/test_release_publish.yml +++ b/.github/workflows/test_release_publish.yml @@ -11,10 +11,6 @@ jobs: runs-on: ubuntu-latest steps: - - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 - with: - egress-policy: audit - - name: Check out the repository uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 with: diff --git a/.github/workflows/version_bump_pr.yml b/.github/workflows/version_bump_pr.yml index 536c0eee..2dad0f79 100644 --- a/.github/workflows/version_bump_pr.yml +++ b/.github/workflows/version_bump_pr.yml @@ -16,9 +16,6 @@ jobs: runs-on: ubuntu-latest steps: - - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 - with: - egress-policy: audit - name: Check out the repository uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 with: