Update Harden Runner step in node workflows

ilhamseptiadi27 · Dec 7, 2021 · cecf848 · cecf848
1 parent be75d5e
commit cecf848
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 4 deletions.
diff --git a/.github/workflows/node-release.yml b/.github/workflows/node-release.yml
@@ -18,7 +18,12 @@ jobs:
       packages: write
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@main
+        uses: step-security/harden-runner@v1
+        with:
+          allowed-endpoints:
+            github.com:443
+            npm.pkg.github.com:443
+            registry.npmjs.org:443
 
       - name: Checkout release
         if: github.event_name != 'workflow_dispatch'

diff --git a/.github/workflows/node-workflow.yml b/.github/workflows/node-workflow.yml
@@ -26,11 +26,9 @@ jobs:
         operating-system: [ubuntu-latest, windows-latest, macos-latest]
     steps:
       - name: Harden Runner
-        if: runner.os == 'Linux'
-        uses: step-security/harden-runner@main
+        uses: step-security/harden-runner@v1
         with:
           allowed-endpoints:
-            beta.api.stepsecurity.io.:443
             codecov.io.:443
             github.com.:443
             nodejs.org.:443