From 720b909e603a458ba2610d6dc510c5f99c06074c Mon Sep 17 00:00:00 2001 From: Volodymyr Kolesnykov Date: Sun, 8 Nov 2026 03:26:34 +0200 Subject: [PATCH 1/2] ci: remove harden-runner from C++ test workflows --- .github/workflows/ci-vcpkg.yml | 5 ----- 1 file changed, 5 deletions(-) diff --git a/.github/workflows/ci-vcpkg.yml b/.github/workflows/ci-vcpkg.yml index a183c62..9e44001 100644 --- a/.github/workflows/ci-vcpkg.yml +++ b/.github/workflows/ci-vcpkg.yml @@ -31,11 +31,6 @@ jobs: VCPKG_DEFAULT_HOST_TRIPLET: ${{ matrix.triplet }} VCPKG_BINARY_SOURCES: clear;default,readwrite steps: - - name: Harden Runner - uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 - with: - egress-policy: audit - - name: Check out code uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: From d31282a6d23dc4f750e7e266ae696bd9e305f02e Mon Sep 17 00:00:00 2001 From: Volodymyr Kolesnykov Date: Sun, 8 Nov 2026 03:26:37 +0200 Subject: [PATCH 2/2] ci: remove harden-runner from C++ test workflows --- .github/workflows/ctest.yml | 29 ----------------------------- 1 file changed, 29 deletions(-) diff --git a/.github/workflows/ctest.yml b/.github/workflows/ctest.yml index e57b424..2562595 100644 --- a/.github/workflows/ctest.yml +++ b/.github/workflows/ctest.yml @@ -19,14 +19,6 @@ jobs: outputs: scripts: ${{ steps.set-matrix.outputs.scripts }} steps: - - name: Harden Runner - uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 - with: - disable-sudo: true - egress-policy: block - allowed-endpoints: > - github.com:443 - - name: Check out the source code uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 @@ -45,19 +37,6 @@ jobs: permissions: contents: read steps: - - name: Harden Runner - uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 - with: - egress-policy: block - allowed-endpoints: > - api.github.com:443 - azure.archive.ubuntu.com:80 - esm.ubuntu.com:443 - github.com:443 - motd.ubuntu.com:443 - objects.githubusercontent.com:443 - packages.microsoft.com:443 - - name: Check out code uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 @@ -86,14 +65,6 @@ jobs: checks: write pull-requests: write steps: - - name: Harden Runner - uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 - with: - disable-sudo: true - egress-policy: block - allowed-endpoints: > - api.github.com:443 - - name: Download test results uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: