Skip to content

chore(deps): Bump step-security/harden-runner from 2.16.1 to 2.17.0#306

Merged
cpanato merged 1 commit intomainfrom
dependabot/github_actions/step-security/harden-runner-2.17.0
Apr 15, 2026
Merged

chore(deps): Bump step-security/harden-runner from 2.16.1 to 2.17.0#306
cpanato merged 1 commit intomainfrom
dependabot/github_actions/step-security/harden-runner-2.17.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 10, 2026

Bumps step-security/harden-runner from 2.16.1 to 2.17.0.

Release notes

Sourced from step-security/harden-runner's releases.

v2.17.0

What's Changed

Policy Store Support

Added use-policy-store and api-key inputs to fetch security policies directly from the StepSecurity Policy Store. Policies can be defined and attached at the workflow, repo, org, or cluster (ARC) level, with the most granular policy taking precedence. This is the preferred method over the existing policy input which requires id-token: write permission. If no policy is found in the store, the action defaults to audit mode.

Full Changelog: step-security/harden-runner@v2.16.1...v2.17.0

Commits

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 10, 2026
@dependabot dependabot bot force-pushed the dependabot/github_actions/step-security/harden-runner-2.17.0 branch 2 times, most recently from 4dc8cfc to a848830 Compare April 15, 2026 09:37
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.16.1 to 2.17.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@fe10465...f808768)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@cpanato cpanato force-pushed the dependabot/github_actions/step-security/harden-runner-2.17.0 branch from a848830 to ce4dd12 Compare April 15, 2026 09:40
@cpanato cpanato merged commit fe8da56 into main Apr 15, 2026
16 checks passed
@cpanato cpanato deleted the dependabot/github_actions/step-security/harden-runner-2.17.0 branch April 15, 2026 09:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant