Merge pull request backstage#30389 from backstage/renovate/step-security-harden-runner-2.x

chore(deps): update step-security/harden-runner action to v2.12.2

Author: benjdlambert

.github/workflows/api-breaking-changes-comment.yml

@@ -23,7 +23,7 @@ jobs:
  comment-cache-key: ${{ steps.hash.outputs.COMMENT_FILE_HASH }}
  steps:
  - name: Harden Runner
- uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
+ uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
  with:
  disable-sudo: true
  egress-policy: block

.github/workflows/api-breaking-changes.yml

@@ -14,7 +14,7 @@ jobs:
  if: ${{ github.event_name != 'pull_request' || github.event.action != 'closed' }}
  steps:
  - name: Harden Runner
- uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
+ uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
  with:
  egress-policy: audit
 

.github/workflows/automate_area-labels.yml

@@ -13,7 +13,7 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Harden Runner
- uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
+ uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
  with:
  egress-policy: audit
 

.github/workflows/automate_changeset_feedback.yml

@@ -23,7 +23,7 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Harden Runner
- uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
+ uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
  with:
  egress-policy: audit
 

.github/workflows/automate_merge_message.yml

@@ -24,7 +24,7 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Harden Runner
- uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
+ uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
  with:
  egress-policy: audit
 

.github/workflows/automate_stale.yml

@@ -15,7 +15,7 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Harden Runner
- uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
+ uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
  with:
  egress-policy: audit
 

.github/workflows/ci-noop.yml

@@ -40,7 +40,7 @@ jobs:
  name: Test ${{ matrix.node-version }}
  steps:
  - name: Harden Runner
- uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
+ uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
  with:
  egress-policy: audit
 

.github/workflows/ci.yml

@@ -28,7 +28,7 @@ jobs:
  name: Install ${{ matrix.node-version }}
  steps:
  - name: Harden Runner
- uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
+ uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
  with:
  egress-policy: audit
 
@@ -64,7 +64,7 @@ jobs:
  name: Verify ${{ matrix.node-version }}
  steps:
  - name: Harden Runner
- uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
+ uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
  with:
  egress-policy: audit
 

.github/workflows/cron.yml

@@ -10,7 +10,7 @@ jobs:
  timeout-minutes: 10
  steps:
  - name: Harden Runner
- uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
+ uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
  with:
  egress-policy: audit
 

.github/workflows/deploy_docker-image.yml

@@ -20,7 +20,7 @@ jobs:
 
  steps:
  - name: Harden Runner
- uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
+ uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
  with:
  egress-policy: audit