From 9abce32c247eddb7e5b46f1f73c1456129d791a5 Mon Sep 17 00:00:00 2001 From: "Benjamin T. Schwertfeger" Date: Tue, 10 Dec 2024 21:41:05 +0100 Subject: [PATCH 1/2] Update egress policy in CI --- .github/workflows/_codeql.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/_codeql.yaml b/.github/workflows/_codeql.yaml index 80ab614..52e1915 100644 --- a/.github/workflows/_codeql.yaml +++ b/.github/workflows/_codeql.yaml @@ -33,11 +33,11 @@ jobs: - name: Harden Runner uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: - # egress-policy: audit - disable-sudo: true egress-policy: block + disable-sudo: true allowed-endpoints: > api.github.com:443 + api.securityscorecards.dev github.com:443 uploads.github.com:443 From d7978a40d2dcace870aec5e5a04f26d69ae74bb6 Mon Sep 17 00:00:00 2001 From: "Benjamin T. Schwertfeger" Date: Tue, 10 Dec 2024 22:01:15 +0100 Subject: [PATCH 2/2] just set audit policy --- .github/ISSUE_TEMPLATE/bug_report.md | 3 ++- .github/workflows/_codeql.yaml | 2 +- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.github/ISSUE_TEMPLATE/bug_report.md b/.github/ISSUE_TEMPLATE/bug_report.md index 6fa0318..08fef26 100644 --- a/.github/ISSUE_TEMPLATE/bug_report.md +++ b/.github/ISSUE_TEMPLATE/bug_report.md @@ -26,7 +26,8 @@ If applicable, add screenshots or code snippets to help explain your problem. **Environment (please complete the following information):** - OS: [e.g. MacOS Ventura xxx] -- Python [e.g. 3.7, 3.11] +- Python [e.g. 3.10, 3.11] +- python-kraken-sdk [e.g. v3.1.2] **Additional context** Add any other context about the problem here. diff --git a/.github/workflows/_codeql.yaml b/.github/workflows/_codeql.yaml index 52e1915..ec6d154 100644 --- a/.github/workflows/_codeql.yaml +++ b/.github/workflows/_codeql.yaml @@ -33,7 +33,7 @@ jobs: - name: Harden Runner uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: - egress-policy: block + egress-policy: audit disable-sudo: true allowed-endpoints: > api.github.com:443