From c34338c4ca66f26d45091a530c62dbd8a809f0ef Mon Sep 17 00:00:00 2001 From: Nikolay Vlasov Date: Tue, 7 Jul 2026 14:07:25 +1000 Subject: [PATCH] fix(ci): Correct harden-runner SHA pin in stale workflow The Harden Runner step pinned step-security/harden-runner to a SHA whose tail was mangled, so GitHub Actions could not resolve the action and the 'Stale issue & PR handler' workflow failed at setup. Repin to the real commit SHA for the v2.10.4 tag it was labeled as. --- .github/workflows/stale-issue-pr.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/stale-issue-pr.yml b/.github/workflows/stale-issue-pr.yml index 5d90f0c6..e4c41ecb 100644 --- a/.github/workflows/stale-issue-pr.yml +++ b/.github/workflows/stale-issue-pr.yml @@ -15,7 +15,7 @@ jobs: pull-requests: write steps: - name: Harden Runner - uses: step-security/harden-runner@cb605e52c26070c328afc4141f4ae0c868cc51a9 # v2.10.4 + uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 with: egress-policy: audit