Drop harden-runner

Hostnames are too unpredictable.
hynek · Apr 16, 2023 · c8dc77e · c8dc77e
1 parent da15a71
commit c8dc77e
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 24 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -207,11 +207,6 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@v2
-        with:
-          egress-policy: block
-
       - name: Decide whether the needed jobs succeeded or failed
         uses: re-actors/alls-green@release/v1
         with:

diff --git a/.github/workflows/pypi-package.yml b/.github/workflows/pypi-package.yml
@@ -22,11 +22,6 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: step-security/harden-runner@v2
-        with:
-          disable-sudo: true
-          egress-policy: audit
-
       - uses: actions/checkout@v3
         with:
           fetch-depth: 0
@@ -42,13 +37,6 @@ jobs:
     needs: build-package
 
     steps:
-      - uses: step-security/harden-runner@v2
-        with:
-          disable-sudo: true
-          egress-policy: block
-          allowed-endpoints: >
-            test.pypi.org:443
-
       - name: Download packages built by build-and-inspect-python-package
         uses: actions/download-artifact@v3
         with:
@@ -70,13 +58,6 @@ jobs:
     needs: build-package
 
     steps:
-      - uses: step-security/harden-runner@v2
-        with:
-          disable-sudo: true
-          egress-policy: block
-          allowed-endpoints: >
-            upload.pypi.org:443
-
       - name: Download packages built by build-and-inspect-python-package
         uses: actions/download-artifact@v3
         with: