Skip to content

Commit 04e5b19

Browse files
booxterbooxter
committed
ci: Remove harden-runner steps from jobs
No one looks at results; the value of it is unknown to anyone I asked. Signed-off-by: Ihar Hrachyshka <ihar.hrachyshka@gmail.com>
1 parent 9089572 commit 04e5b19

11 files changed

Lines changed: 1 addition & 101 deletions

‎.github/workflows/actionlint.yml‎

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -29,11 +29,6 @@ jobs:
2929
actionlint:
3030
runs-on: ubuntu-latest
3131
steps:
32-
- name: "Harden Runner"
33-
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
34-
with:
35-
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
36-
3732
- name: "Checkout"
3833
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
3934
with:

‎.github/workflows/docs.yml‎

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -32,10 +32,6 @@ jobs:
3232
markdown-lint:
3333
runs-on: ubuntu-latest
3434
steps:
35-
- name: "Harden Runner"
36-
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
37-
with:
38-
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
3935
- name: "Checkout"
4036
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
4137
with:

‎.github/workflows/e2e-nvidia-l40s-x4-py312.yml‎

Lines changed: 0 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -87,12 +87,6 @@ jobs:
8787
pull-requests: write
8888

8989
steps:
90-
- name: "Harden Runner"
91-
# v2.10.1
92-
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0
93-
with:
94-
egress-policy: audit
95-
9690
- name: Checkout instructlab/training
9791
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
9892
with:
@@ -138,12 +132,6 @@ jobs:
138132
runs-on: ubuntu-latest
139133
if: ${{ always() }}
140134
steps:
141-
- name: "Harden Runner"
142-
# v2.10.1
143-
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0
144-
with:
145-
egress-policy: audit
146-
147135
- name: Configure AWS credentials
148136
uses: aws-actions/configure-aws-credentials@b47578312673ae6fa5b5096b330d9fbac3d116df # v4.2.1
149137
with:

‎.github/workflows/e2e-nvidia-l40s-x4-sdk.yml‎

Lines changed: 1 addition & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -103,11 +103,6 @@ jobs:
103103
pull-requests: write
104104

105105
steps:
106-
- name: "Harden Runner"
107-
# v2.10.1
108-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf
109-
with:
110-
egress-policy: audit
111106
- name: Install Packages
112107
run: |
113108
cat /etc/os-release
@@ -209,12 +204,6 @@ jobs:
209204
runs-on: ubuntu-latest
210205
if: ${{ always() }}
211206
steps:
212-
- name: "Harden Runner"
213-
# v2.10.1
214-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf
215-
with:
216-
egress-policy: audit
217-
218207
- name: Configure AWS credentials
219208
uses: aws-actions/configure-aws-credentials@ececac1a45f3b08a01d2dd070d28d111c5fe6722 # v4.1.0
220209
with:
@@ -236,12 +225,6 @@ jobs:
236225
runs-on: ubuntu-latest
237226
if: ${{ always() }}
238227
steps:
239-
- name: "Harden Runner"
240-
# v2.10.1
241-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf
242-
with:
243-
egress-policy: audit
244-
245228
- name: Configure AWS credentials
246229
uses: aws-actions/configure-aws-credentials@ececac1a45f3b08a01d2dd070d28d111c5fe6722 # v4.1.0
247230
with:
@@ -326,4 +309,4 @@ jobs:
326309
if: steps.phase-2-upload-s3.outcome == 'failure'
327310
run: |
328311
echo "::warning::Failed to upload Phase 2 loss graph to S3. This won't block the workflow, but you may want to investigate."
329-
echo "Loss graph upload failed" >> "${GITHUB_STEP_SUMMARY}"
312+
echo "Loss graph upload failed" >> "${GITHUB_STEP_SUMMARY}"

‎.github/workflows/e2e-nvidia-l40s-x4.yml‎

Lines changed: 0 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -87,12 +87,6 @@ jobs:
8787
pull-requests: write
8888

8989
steps:
90-
- name: "Harden Runner"
91-
# v2.10.1
92-
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0
93-
with:
94-
egress-policy: audit
95-
9690
- name: Checkout instructlab/training
9791
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
9892
with:
@@ -138,12 +132,6 @@ jobs:
138132
runs-on: ubuntu-latest
139133
if: ${{ always() }}
140134
steps:
141-
- name: "Harden Runner"
142-
# v2.10.1
143-
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0
144-
with:
145-
egress-policy: audit
146-
147135
- name: Configure AWS credentials
148136
uses: aws-actions/configure-aws-credentials@b47578312673ae6fa5b5096b330d9fbac3d116df # v4.2.1
149137
with:

‎.github/workflows/lint.yml‎

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -59,11 +59,6 @@ jobs:
5959
commands: |
6060
tox -e mypy
6161
steps:
62-
- name: "Harden Runner"
63-
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
64-
with:
65-
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
66-
6762
- name: "Checkout"
6863
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
6964
with:

‎.github/workflows/pypi.yaml‎

Lines changed: 0 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -36,11 +36,6 @@ jobs:
3636
name: Build and check packages
3737
runs-on: ubuntu-latest
3838
steps:
39-
- name: "Harden Runner"
40-
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
41-
with:
42-
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
43-
4439
- name: "Checkout"
4540
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
4641
with:
@@ -65,11 +60,6 @@ jobs:
6560
needs: build-package
6661

6762
steps:
68-
- name: "Harden Runner"
69-
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
70-
with:
71-
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
72-
7363
- name: "Download build artifacts"
7464
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
7565
with:
@@ -97,11 +87,6 @@ jobs:
9787
needs: build-package
9888

9989
steps:
100-
- name: "Harden Runner"
101-
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
102-
with:
103-
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
104-
10590
- name: "Download build artifacts"
10691
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
10792
with:

‎.github/workflows/smoke-py312.yaml‎

Lines changed: 0 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -107,11 +107,6 @@ jobs:
107107
# untrusted code from PRs.
108108
permissions: {}
109109
steps:
110-
- name: "Harden runner"
111-
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.10.1
112-
with:
113-
egress-policy: audit
114-
115110
- name: "Checkout code"
116111
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
117112
with:
@@ -130,11 +125,6 @@ jobs:
130125
runs-on: ubuntu-latest
131126
if: ${{ always() }}
132127
steps:
133-
- name: "Harden runner"
134-
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.10.1
135-
with:
136-
egress-policy: audit
137-
138128
- name: "Configure AWS credentials"
139129
uses: "aws-actions/configure-aws-credentials@b47578312673ae6fa5b5096b330d9fbac3d116df" # v4.2.1
140130
with:

‎.github/workflows/smoke.yaml‎

Lines changed: 0 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -103,11 +103,6 @@ jobs:
103103
# untrusted code from PRs.
104104
permissions: {}
105105
steps:
106-
- name: "Harden runner"
107-
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.10.1
108-
with:
109-
egress-policy: audit
110-
111106
- name: "Checkout code"
112107
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
113108
with:
@@ -132,11 +127,6 @@ jobs:
132127
runs-on: ubuntu-latest
133128
if: ${{ always() }}
134129
steps:
135-
- name: "Harden runner"
136-
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.10.1
137-
with:
138-
egress-policy: audit
139-
140130
- name: "Configure AWS credentials"
141131
uses: "aws-actions/configure-aws-credentials@b47578312673ae6fa5b5096b330d9fbac3d116df" # v4.2.1
142132
with:

‎.github/workflows/stale_bot.yml‎

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -23,11 +23,6 @@ jobs:
2323
pull-requests: write
2424
runs-on: ubuntu-latest
2525
steps:
26-
- name: "Harden Runner"
27-
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
28-
with:
29-
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
30-
3126
- name: "Stale Action"
3227
uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9.1.0
3328
with:

0 commit comments

Comments
 (0)