mirror of
https://github.com/step-security/harden-runner
synced 2026-08-09 13:11:02 +00:00
Varun Sharma
49e6c282a3
- Replace @actions/http-client socketTimeout with fetch + AbortSignal.timeout(3s) on monitor, tls-inspect, policy fetch, policy-store fetch, and addSummary, so DNS + TCP connect + TLS are bounded (was unbounded, causing ~2-4 min hangs) - Add unhandledRejection guard in setup.ts and cleanup.ts so Node 22+ does not silently kill the step on background async errors from third-party deps - Skip Windows post-step cleanup when agent dir is missing (Pre-step crashed before install), instead of throwing ENOENT on post_event.json - Bump @types/node to ^24, typescript to ^5, ts-jest to ^29.4 to match node24 runtime and enable AbortSignal.timeout typings
54 lines
1.6 KiB
JSON
54 lines
1.6 KiB
JSON
{
|
|
"name": "step-security-harden-runner",
|
|
"version": "2.7.0",
|
|
"description": "Security agent for GitHub-hosted runner: block egress traffic & detect code overwrite to prevent breaches",
|
|
"main": "index.js",
|
|
"scripts": {
|
|
"build": "npm run main && npm run pre && npm run post",
|
|
"main": "ncc build src/index.ts --source-map",
|
|
"pre": "ncc build src/setup.ts --source-map -o dist/pre",
|
|
"post": "ncc build src/cleanup.ts --source-map -o dist/post",
|
|
"lint": "eslint src/**/*.ts",
|
|
"test": "jest"
|
|
},
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "git+https://github.com/step-security/harden-runner.git"
|
|
},
|
|
"keywords": [],
|
|
"author": "Varun Sharma",
|
|
"license": "Apache License 2.0",
|
|
"bugs": {
|
|
"url": "https://github.com/step-security/harden-runner/issues"
|
|
},
|
|
"homepage": "https://github.com/step-security/harden-runner#readme",
|
|
"dependencies": {
|
|
"@actions/cache": "^4.0.0",
|
|
"@actions/core": "^1.5.0",
|
|
"@actions/exec": "^1.1.0",
|
|
"@actions/github": "^6.0.1",
|
|
"@actions/http-client": "^2.0.1",
|
|
"@actions/tool-cache": "^1.7.1",
|
|
"@babel/helpers": "^7.26.10",
|
|
"ansi-regex": ">=5.0.1",
|
|
"is-docker": "^3.0.0",
|
|
"node-fetch": ">=3.2.0",
|
|
"uuid": "^8.3.2"
|
|
},
|
|
"devDependencies": {
|
|
"@types/jest": "^27.5.2",
|
|
"@types/node": "^24.13.1",
|
|
"@typescript-eslint/eslint-plugin": "^6.1.0",
|
|
"@typescript-eslint/parser": "^6.1.0",
|
|
"@vercel/ncc": "^0.38.3",
|
|
"eslint": "^7.32.0",
|
|
"eslint-config-google": "^0.14.0",
|
|
"jest": "^29.3.1",
|
|
"jest-junit": ">=13.0.0",
|
|
"nock": "^13.3.0",
|
|
"ts-jest": "^29.4.11",
|
|
"ts-node": "^10.9.1",
|
|
"typescript": "^5.9.3"
|
|
}
|
|
}
|