mirror of
https://github.com/natelandau/obsidian-metadata.git
synced 2025-11-17 09:23:40 -05:00
ci: harden runner configuration
This commit is contained in:
5
.github/workflows/pypi-release.yml
vendored
5
.github/workflows/pypi-release.yml
vendored
@@ -20,8 +20,11 @@ jobs:
|
||||
steps:
|
||||
- uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 # v2.1.0
|
||||
with:
|
||||
egress-policy: audit
|
||||
egress-policy: block
|
||||
disable-sudo: true
|
||||
allowed-endpoints: >
|
||||
github.com:443
|
||||
upload.pypi.org:443
|
||||
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@v3
|
||||
|
||||
Reference in New Issue
Block a user