Un-harden for the time being.

northwood-labs · Apr 8, 2024 · 226a1cd · 226a1cd
1 parent d4b7755
commit 226a1cd
Show file tree

Hide file tree

Showing 63 changed files with 4 additions and 329 deletions.
diff --git a/.github/workflows/_build-and-cache.yml b/.github/workflows/_build-and-cache.yml
@@ -41,11 +41,6 @@ jobs:
       options: --privileged
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Git clone
         uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
         with:

diff --git a/.github/workflows/_build-musl.yml b/.github/workflows/_build-musl.yml
@@ -39,11 +39,6 @@ jobs:
           - arm64
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Git clone
         uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
         with:

diff --git a/.github/workflows/build-1password-cli.yml b/.github/workflows/build-1password-cli.yml
@@ -50,11 +50,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:
@@ -86,11 +81,6 @@ jobs:
       options: --privileged
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Git clone
         uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
         with:

diff --git a/.github/workflows/build-actionlint.yml b/.github/workflows/build-actionlint.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-aws-vault.yml b/.github/workflows/build-aws-vault.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-chamber.yml b/.github/workflows/build-chamber.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-cloud-nuke.yml b/.github/workflows/build-cloud-nuke.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-cosign.yml b/.github/workflows/build-cosign.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-direnv.yml b/.github/workflows/build-direnv.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-dive.yml b/.github/workflows/build-dive.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-driftwood.yml b/.github/workflows/build-driftwood.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-editorconfig-checker.yml b/.github/workflows/build-editorconfig-checker.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-eza.yml b/.github/workflows/build-eza.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-fd.yml b/.github/workflows/build-fd.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-freeze.yml b/.github/workflows/build-freeze.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-fzf.yml b/.github/workflows/build-fzf.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-gama.yml b/.github/workflows/build-gama.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-gh.yml b/.github/workflows/build-gh.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-git-cliff.yml b/.github/workflows/build-git-cliff.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-glow.yml b/.github/workflows/build-glow.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-gocovsh.yml b/.github/workflows/build-gocovsh.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-golangci-lint.yml b/.github/workflows/build-golangci-lint.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-golines.yml b/.github/workflows/build-golines.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-goplicate.yml b/.github/workflows/build-goplicate.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-goreleaser-pro.yml b/.github/workflows/build-goreleaser-pro.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-goreleaser.yml b/.github/workflows/build-goreleaser.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-gosec.yml b/.github/workflows/build-gosec.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-gotestsum.yml b/.github/workflows/build-gotestsum.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-gum.yml b/.github/workflows/build-gum.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-hadolint.yml b/.github/workflows/build-hadolint.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-hcledit.yml b/.github/workflows/build-hcledit.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env:

diff --git a/.github/workflows/build-hugo.yml b/.github/workflows/build-hugo.yml
@@ -57,11 +57,6 @@ jobs:
       package_version: ${{ steps.lookup_version.outputs.package_version }}
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
-        with:
-          egress-policy: audit
-
       - name: Lookup latest version of package
         id: lookup_version
         env: