From 198eed6199a4c27988d7e728e09d57c9be418a4b Mon Sep 17 00:00:00 2001 From: Jeremy Frasier Date: Fri, 20 Dec 2024 13:08:34 -0500 Subject: [PATCH] Re-enable the GitHubSecurityLab/actions-permissions/monitor action With the merge of GitHubSecurityLab/actions-permissions#34, this proxy no longer interferes with AWS API or boto3 calls. --- .github/workflows/build.yml | 10 ++++------ .github/workflows/prerelease.yml | 10 ++++------ .github/workflows/release.yml | 10 ++++------ 3 files changed, 12 insertions(+), 18 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 639340b..a06b91f 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -245,12 +245,10 @@ jobs: # - arm64 - x86_64 steps: - # If we use this proxy then the calls to the AWS API on - # localhost fail. - # - uses: GitHubSecurityLab/actions-permissions/monitor@v1 - # with: - # # Uses the organization variable unless overridden - # config: ${{ vars.ACTIONS_PERMISSIONS_CONFIG }} + - uses: GitHubSecurityLab/actions-permissions/monitor@v1 + with: + # Uses the organization variable unless overridden + config: ${{ vars.ACTIONS_PERMISSIONS_CONFIG }} - id: harden-runner name: Harden the runner uses: step-security/harden-runner@v2 diff --git a/.github/workflows/prerelease.yml b/.github/workflows/prerelease.yml index 382fd0f..c52862e 100644 --- a/.github/workflows/prerelease.yml +++ b/.github/workflows/prerelease.yml @@ -52,12 +52,10 @@ jobs: # - arm64 - x86_64 steps: - # If we use this proxy then the calls to the AWS API on - # localhost fail. - # - uses: GitHubSecurityLab/actions-permissions/monitor@v1 - # with: - # # Uses the organization variable unless overridden - # config: ${{ vars.ACTIONS_PERMISSIONS_CONFIG }} + - uses: GitHubSecurityLab/actions-permissions/monitor@v1 + with: + # Uses the organization variable unless overridden + config: ${{ vars.ACTIONS_PERMISSIONS_CONFIG }} - id: harden-runner name: Harden the runner uses: step-security/harden-runner@v2 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 68676aa..00e30a6 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -59,12 +59,10 @@ jobs: # - arm64 - x86_64 steps: - # If we use this proxy then the calls to the AWS API on - # localhost fail. - # - uses: GitHubSecurityLab/actions-permissions/monitor@v1 - # with: - # # Uses the organization variable unless overridden - # config: ${{ vars.ACTIONS_PERMISSIONS_CONFIG }} + - uses: GitHubSecurityLab/actions-permissions/monitor@v1 + with: + # Uses the organization variable unless overridden + config: ${{ vars.ACTIONS_PERMISSIONS_CONFIG }} - id: harden-runner name: Harden the runner uses: step-security/harden-runner@v2