mirror of
https://github.com/natelandau/obsidian-metadata.git
synced 2025-11-18 09:53:40 -05:00
ci: harden runner configuration
This commit is contained in:
5
.github/workflows/pypi-release.yml
vendored
5
.github/workflows/pypi-release.yml
vendored
@@ -20,8 +20,11 @@ jobs:
|
|||||||
steps:
|
steps:
|
||||||
- uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 # v2.1.0
|
- uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 # v2.1.0
|
||||||
with:
|
with:
|
||||||
egress-policy: audit
|
egress-policy: block
|
||||||
disable-sudo: true
|
disable-sudo: true
|
||||||
|
allowed-endpoints: >
|
||||||
|
github.com:443
|
||||||
|
upload.pypi.org:443
|
||||||
|
|
||||||
- name: Checkout repository
|
- name: Checkout repository
|
||||||
uses: actions/checkout@v3
|
uses: actions/checkout@v3
|
||||||
|
|||||||
Reference in New Issue
Block a user