diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index ab8bbfbc..c47c87c1 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -31,7 +31,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@03bee3930647ebbf994244c21ddbc0d4933aab4f + uses: step-security/harden-runner@6b3083af2869dc3314a0257a42f4af696cc79ba3 with: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs