Merge pull request #2504 from step-security/update-templates-main

Update templates main

Author: varunsh-coder

remediation/workflow/hardenrunner/addaction.go

@@ -12,7 +12,7 @@ import (
 
 const (
 	HardenRunnerActionPath = "step-security/harden-runner"
-	HardenRunnerActionName = "Harden Runner"
+	HardenRunnerActionName = "Harden the runner (Audit all outbound calls)"
 )
 
 func AddAction(inputYaml, action string, pinActions, pinToImmutable bool) (string, bool, error) {

testfiles/addaction/output/2jobs.yml

@@ -5,7 +5,7 @@ jobs:
   list-directory:
     runs-on: ubuntu-latest
     steps:
-     - name: Harden Runner
+     - name: Harden the runner (Audit all outbound calls)
        uses: step-security/harden-runner@v2
        with:
          egress-policy: audit
@@ -14,7 +14,7 @@ jobs:
   list-directory1:
     runs-on: ubuntu-latest
     steps:
-     - name: Harden Runner
+     - name: Harden the runner (Audit all outbound calls)
        uses: step-security/harden-runner@v2
        with:
          egress-policy: audit

testfiles/addaction/output/action-issues.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - name: Harden Runner
+    - name: Harden the runner (Audit all outbound calls)
       uses: step-security/harden-runner@v2
       with:
         egress-policy: audit

testfiles/addaction/output/alreadypresent.yml

@@ -10,7 +10,7 @@ jobs:
   list-directory1:
     runs-on: ubuntu-latest
     steps:
-     - name: Harden Runner
+     - name: Harden the runner (Audit all outbound calls)
        uses: step-security/harden-runner@v2
        with:
          egress-policy: audit

testfiles/addworkflow/expected-scorecards.yml

@@ -41,7 +41,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@dc50aa9510b46c811795eb24b2f1ba02a914e534 # v2.3.3
+        uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
         with:
           results_file: results.sarif
           results_format: sarif

testfiles/secureworkflow/output/allscenarios.yml

@@ -14,7 +14,7 @@ jobs:
       statuses: write  # for github/super-linter to mark status of each linter run
     runs-on: ubuntu-latest  
     steps:
-      - name: Harden Runner
+      - name: Harden the runner (Audit all outbound calls)
         uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 # v2.0.0
         with:
           egress-policy: audit

testfiles/secureworkflow/output/missingaction.yml

@@ -8,7 +8,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest  
     steps:
-      - name: Harden Runner
+      - name: Harden the runner (Audit all outbound calls)
         uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 # v2.0.0
         with:
           egress-policy: audit

testfiles/secureworkflow/output/noperms.yml

@@ -8,7 +8,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest  
     steps:
-      - name: Harden Runner
+      - name: Harden the runner (Audit all outbound calls)
         uses: step-security/harden-runner@ebacdc22ef6c2cfb85ee5ded8f2e640f4c776dd5 # v2.0.0
         with:
           egress-policy: audit

testfiles/secureworkflow/output/nopin.yml

@@ -14,7 +14,7 @@ jobs:
       statuses: write  # for github/super-linter to mark status of each linter run
     runs-on: ubuntu-latest  
     steps:
-      - name: Harden Runner
+      - name: Harden the runner (Audit all outbound calls)
         uses: step-security/harden-runner@v2
         with:
           egress-policy: audit

workflow-templates/scorecards.yml

@@ -41,7 +41,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@dc50aa9510b46c811795eb24b2f1ba02a914e534 # v2.3.3
+        uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
         with:
           results_file: results.sarif
           results_format: sarif