updated stream

step-security · Jan 21, 2025 · 6c5c6ce · 6c5c6ce
1 parent 8772e42
commit 6c5c6ce
Show file tree

Hide file tree

Showing 3 changed files with 42 additions and 17 deletions.
diff --git a/.github/workflows/test-auth.yml b/.github/workflows/test-auth.yml
@@ -16,8 +16,13 @@ jobs:
         mongodb-password: ['ci']
 
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
+        with:
+          egress-policy: audit
+
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Start MongoDB Server v${{ matrix.mongodb-version }}
         uses: ./
@@ -28,7 +33,7 @@ jobs:
           mongodb-password: ${{ matrix.mongodb-password }}
 
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
         with:
           node-version: ${{ matrix.node-version }}
 
@@ -41,4 +46,4 @@ jobs:
           CI: true
           MONGODB_DB: ${{ matrix.mongodb-db }}
           MONGODB_USERNAME: ${{ matrix.mongodb-username }}
-          MONGODB_PASSWORD: ${{ matrix.mongodb-password }}
+          MONGODB_PASSWORD: ${{ matrix.mongodb-password }}
diff --git a/.github/workflows/test-replica-set.yml b/.github/workflows/test-replica-set.yml
@@ -13,8 +13,13 @@ jobs:
         mongodb-version: ['5.0', '6.0', '7.0']
 
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
+        with:
+          egress-policy: audit
+
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Start MongoDB Server v${{ matrix.mongodb-version }}
         uses: ./
@@ -23,7 +28,7 @@ jobs:
           mongodb-replica-set: mongodb-test-rs
 
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
         with:
           node-version: ${{ matrix.node-version }}
 
@@ -40,14 +45,19 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [20, 22]
+        node-version: [18, 20]
         mongodb-port: [23456]
-        mongodb-version: ['5.0', '6.0', '7.0']
+        mongodb-version: ['4.4', '5.0', '6.0']
 
     name: MongoDB v${{ matrix.mongodb-version }} RS, Port ${{ matrix.mongodb-port }} — Node.js v${{ matrix.node-version }}
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
+        with:
+          egress-policy: audit
+
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Start MongoDB Server v${{ matrix.mongodb-version }}
         uses: ./
@@ -57,7 +67,7 @@ jobs:
           mongodb-replica-set: mongodb-test-rs
 
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
         with:
           node-version: ${{ matrix.node-version }}
 
@@ -69,4 +79,4 @@ jobs:
         env:
           CI: true
           MONGODB_PORT: ${{ matrix.mongodb-port }}
-          MONGODB_REPLICA_SET: mongodb-test-rs
+          MONGODB_REPLICA_SET: mongodb-test-rs
diff --git a/.github/workflows/test-single-instance.yml b/.github/workflows/test-single-instance.yml
@@ -13,16 +13,21 @@ jobs:
         mongodb-version: ['5.0', '6.0', '7.0']
 
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
+        with:
+          egress-policy: audit
+
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Start MongoDB Server v${{ matrix.mongodb-version }}
         uses: ./
         with:
           mongodb-version: ${{ matrix.mongodb-version }}
 
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
         with:
           node-version: ${{ matrix.node-version }}
 
@@ -41,13 +46,18 @@ jobs:
     strategy:
       matrix:
         mongodb-port: [12345]
-        mongodb-version: ['5.0', '6.0', '7.0']
-        node-version: [20, 22]
+        mongodb-version: ['4.4', '5.0', '6.0']
+        node-version: [18, 20]
 
     name: MongoDB v${{ matrix.mongodb-version }}, Port ${{ matrix.mongodb-port }} — Node.js v${{ matrix.node-version }}
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
+        with:
+          egress-policy: audit
+
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Start MongoDB Server v${{ matrix.mongodb-version }}
         uses: ./
@@ -56,7 +66,7 @@ jobs:
           mongodb-port: ${{ matrix.mongodb-port }}
 
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
         with:
           node-version: ${{ matrix.node-version }}
 
@@ -66,4 +76,4 @@ jobs:
       - name: Run tests
         run: npm test ./test/custom-port
         env:
-          CI: true
+          CI: true