[Actions] Updated .github/workflows/pr-update.yml

credfeto · Aug 25, 2024 · e0fac04 · e0fac04
1 parent 9dd90ee
commit e0fac04
Showing 1 changed file with 0 additions and 51 deletions.
diff --git a/.github/workflows/pr-update.yml b/.github/workflows/pr-update.yml
@@ -25,23 +25,6 @@ jobs:
         shell: bash
         run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE"
 
-      - name: "Harden Security"
-        uses: step-security/harden-runner@v2.9.1
-        with:
-          egress-policy: audit
-          disable-sudo: true
-          allowed-endpoints: >
-            api.github.com:443
-            api.osv.dev:443
-            api.securityscorecards.dev:443
-            codeload.github.com:443
-            fulcio.sigstore.dev:443
-            github.com:443
-            oss-fuzz-build-logs.storage.googleapis.com:443
-            rekor.sigstore.dev:443
-            tuf-repo-cdn.sigstore.dev:443
-            www.bestpractices.dev:443
-
       - name: "Info"
         uses: actions/github-script@v7.0.1
         with:
@@ -66,23 +49,6 @@ jobs:
         shell: bash
         run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE"
 
-      - name: "Harden Security"
-        uses: step-security/harden-runner@v2.9.1
-        with:
-          egress-policy: audit
-          disable-sudo: true
-          allowed-endpoints: >
-            api.github.com:443
-            api.osv.dev:443
-            api.securityscorecards.dev:443
-            codeload.github.com:443
-            fulcio.sigstore.dev:443
-            github.com:443
-            oss-fuzz-build-logs.storage.googleapis.com:443
-            rekor.sigstore.dev:443
-            tuf-repo-cdn.sigstore.dev:443
-            www.bestpractices.dev:443
-
       - name: "Add Labels"
         uses: actions/labeler@v5
         with:
@@ -103,23 +69,6 @@ jobs:
         shell: bash
         run: sudo chown -R "$USER:$USER" "$GITHUB_WORKSPACE"
 
-      - name: "Harden Security"
-        uses: step-security/harden-runner@v2.9.1
-        with:
-          egress-policy: audit
-          disable-sudo: true
-          allowed-endpoints: >
-            api.github.com:443
-            api.osv.dev:443
-            api.securityscorecards.dev:443
-            codeload.github.com:443
-            fulcio.sigstore.dev:443
-            github.com:443
-            oss-fuzz-build-logs.storage.googleapis.com:443
-            rekor.sigstore.dev:443
-            tuf-repo-cdn.sigstore.dev:443
-            www.bestpractices.dev:443
-
       - name: "Assign PR to the creator"
         uses: thomaseizinger/assign-pr-creator-action@v1.0.0
         with: