matrix-art

commit fcc078cce74410e3c47ab25f199621ba6a06c6b6
parent 120cec5ab39606680bb9cbb788ab3e574ec198a9
Author: MTRNord <mtrnord1@gmail.com>
Date:   Tue,  1 Mar 2022 01:50:01 +0100

Disable harden-runner steps for now

Diffstat:
M
.github/workflows/deploy.yml
 | 
12
++++++------
M
.github/workflows/fossa.yml
 | 
20
++++++++++----------
M
.github/workflows/playwright.yml
 | 
48
++++++++++++++++++++++++------------------------
M
.github/workflows/spell-check.yml
 | 
14
+++++++-------

4 files changed, 47 insertions(+), 47 deletions(-)
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
@@ -11,12 +11,12 @@ jobs:
   deploy:
     runs-on: self-hosted
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@bdb12b622a910dfdc99a31fdfe6f45a16bc287a4 # v1
-        with:
-          allowed-endpoints: "gitlab.nordgedanken.dev:443"
-        env:
-          USER: runner
+      # - name: Harden Runner
+      #   uses: step-security/harden-runner@bdb12b622a910dfdc99a31fdfe6f45a16bc287a4 # v1
+      #   with:
+      #     allowed-endpoints: "gitlab.nordgedanken.dev:443"
+      #   env:
+      #     USER: runner
       - name: curl
         uses: wei/curl@012398a392d02480afa2720780031f8621d5f94c # master
         if: ${{ github.event.workflow_run.conclusion == 'success' }}
diff --git a/.github/workflows/fossa.yml b/.github/workflows/fossa.yml
@@ -7,16 +7,16 @@ jobs:
   fossa-scan:
     runs-on: self-hosted
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@bdb12b622a910dfdc99a31fdfe6f45a16bc287a4 # v1
-        with:
-          allowed-endpoints: "
-            app.fossa.com:443
-            github.com:443
-            objects.githubusercontent.com:443
-            raw.githubusercontent.com:443"
-        env:
-          USER: runner
+      # - name: Harden Runner
+      #   uses: step-security/harden-runner@bdb12b622a910dfdc99a31fdfe6f45a16bc287a4 # v1
+      #   with:
+      #     allowed-endpoints: "
+      #       app.fossa.com:443
+      #       github.com:443
+      #       objects.githubusercontent.com:443
+      #       raw.githubusercontent.com:443"
+      #   env:
+      #     USER: runner
       - uses: actions/checkout@629c2de402a417ea7690ca6ce3f33229e27606a5 # v2
       - uses: fossas/fossa-action@3764c5c941b43a8fdce352db1891f7e26e2e3cda # main
         with:
diff --git a/.github/workflows/playwright.yml b/.github/workflows/playwright.yml
@@ -13,30 +13,30 @@ jobs:
     timeout-minutes: 60
     runs-on: self-hosted
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@bdb12b622a910dfdc99a31fdfe6f45a16bc287a4 # v1
-        with:
-          allowed-endpoints: "
-            github.com:22
-            github.com:443
-            api.github.com:443
-            nodejs.org:443
-            registry.npmjs.org:443
-            playwright.azureedge.net:443
-            azure.archive.ubuntu.com:443
-            azure.archive.ubuntu.com:80
-            security.ubuntu.com:80
-            packages.microsoft.com:80
-            packages.microsoft.com:443
-            ppa.launchpad.net:80
-            fonts.googleapis.com:443
-            telemetry.nextjs.org:443
-            location.services.mozilla.com:443
-            art.midnightthoughts.space:443
-            matrix.art.midnightthoughts.space:443
-            localhost:80"
-        env:
-          USER: runner
+      # - name: Harden Runner
+      #   uses: step-security/harden-runner@bdb12b622a910dfdc99a31fdfe6f45a16bc287a4 # v1
+      #   with:
+      #     allowed-endpoints: "
+      #       github.com:22
+      #       github.com:443
+      #       api.github.com:443
+      #       nodejs.org:443
+      #       registry.npmjs.org:443
+      #       playwright.azureedge.net:443
+      #       azure.archive.ubuntu.com:443
+      #       azure.archive.ubuntu.com:80
+      #       security.ubuntu.com:80
+      #       packages.microsoft.com:80
+      #       packages.microsoft.com:443
+      #       ppa.launchpad.net:80
+      #       fonts.googleapis.com:443
+      #       telemetry.nextjs.org:443
+      #       location.services.mozilla.com:443
+      #       art.midnightthoughts.space:443
+      #       matrix.art.midnightthoughts.space:443
+      #       localhost:80"
+      #   env:
+      #     USER: runner
       - uses: actions/checkout@629c2de402a417ea7690ca6ce3f33229e27606a5 # v2
         with:
           persist-credentials: false
diff --git a/.github/workflows/spell-check.yml b/.github/workflows/spell-check.yml
@@ -15,13 +15,13 @@ jobs:
     name: Spell Check with Typos
     runs-on: self-hosted
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@bdb12b622a910dfdc99a31fdfe6f45a16bc287a4 # v1
-        with:
-          egress-policy: block
-          allowed-endpoints: github.com:443
-        env:
-          USER: runner
+      # - name: Harden Runner
+      #   uses: step-security/harden-runner@bdb12b622a910dfdc99a31fdfe6f45a16bc287a4 # v1
+      #   with:
+      #     egress-policy: block
+      #     allowed-endpoints: github.com:443
+      #   env:
+      #     USER: runner
       - name: Checkout Actions Repository
         uses: actions/checkout@629c2de402a417ea7690ca6ce3f33229e27606a5 # v2