ci: Fix smoke failures due to pre not available in local actions

booxter · booxter · commit a34466add0c6 · 2025-05-22T15:27:13.000-04:00
Related: #564 Signed-off-by: Ihar Hrachyshka <ihar.hrachyshka@gmail.com>
diff --git a/.github/actions/run-smoke/action.yml b/.github/actions/run-smoke/action.yml
@@ -8,11 +8,6 @@ inputs:
 runs:
   using: "composite"
   steps:
-    - name: "Harden runner"
-      uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.10.1
-      with:
-        egress-policy: audit
-
     - name: "Install packages"
       shell: bash
       run: |
diff --git a/.github/workflows/smoke-py312.yaml b/.github/workflows/smoke-py312.yaml
@@ -106,6 +106,11 @@ jobs:
     # untrusted code from PRs.
     permissions: {}
     steps:
+      - name: "Harden runner"
+        uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.10.1
+        with:
+          egress-policy: audit
+
       - name: "Checkout code"
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
diff --git a/.github/workflows/smoke.yaml b/.github/workflows/smoke.yaml
@@ -106,6 +106,11 @@ jobs:
     # untrusted code from PRs.
     permissions: {}
     steps:
+      - name: "Harden runner"
+        uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.10.1
+        with:
+          egress-policy: audit
+
       - name: "Checkout code"
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
