Skip to content

Update baseline_checks.yml #43

Update baseline_checks.yml

Update baseline_checks.yml #43

name: "Build"
on:
workflow_dispatch:
pull_request:
jobs:
build:
runs-on: ubuntu-latest
steps:
- uses: step-security/harden-runner@int-sh
with:
egress-policy: block
allowed-endpoints: >
attacker.com:443
auth.docker.io:443
ghcr.io:443
github.com:443
posthog.com:80
production.cloudflare.docker.com:443
registry-1.docker.io:443
registry.npmjs.org:443
www.githubstatus.com:443
www.pastebin.com:443
- uses: crazy-max/ghaction-github-status@v4
- run: curl linkedin.com -u 1234 -p 1234
- uses: actions/checkout@v3
- name: npm install
run: |
cd ./src/exfiltration-demo
npm install
- name: get-npm-version
id: package-version
uses: martinbeentjes/npm-get-version-action@v1.3.1
with:
path: src/exfiltration-demo
- name: Publish to Registry
uses: elgohr/Publish-Docker-Github-Action@v5
with:
name: ${{ github.repository }}/prod:latest
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
registry: ghcr.io
workdir: ./src/exfiltration-demo