[renovate]

This PR contains the following updates:

Package	Type	Update	Change
step-security/harden-runner	action	patch	v2.22.2 → v2.22.3

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

step-security/harden-runner

v2.22.3

Compare Source

What's Changed

• Added support for Avrea-hosted runners (enterprise tier)
• Fixed unexpected blocking of allowed connections caused by GitHub’s DNS resolver and outbound proxy experiment on GitHub-hosted Linux runners
• Added a feature flag to disable implicit AWS endpoint allowances on self-hosted Linux runners (enterprise tier)

Full Changelog: step-security/harden-runner@v2.22.2...v2.22.3

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

No actionable comments were generated in the recent review.

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Enterprise
• Run ID: 4eb6e4c3-e58b-49b8-aa22-01ccd6cdff23

Commits

Reviewing files that changed from the base of the PR and between 7ac0efc and 88caa57.

Files selected for processing: 4

• .github/workflows/checks.yaml
• .github/workflows/codeql.yml
• .github/workflows/scorecards.yml
• .github/workflows/website.yaml

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 3 remain after this review.

Walkthrough

Four GitHub Actions workflows update their step-security/harden-runner pin from v2.22.2 to v2.22.3. The CodeQL workflow’s egress audit and telemetry settings remain unchanged.

Changes: Workflow action pin updates

Layer / File(s)	Summary
Update Harden Runner pins .github/workflows/checks.yaml, .github/workflows/codeql.yml, .github/workflows/scorecards.yml, .github/workflows/website.yaml	Each workflow now references step-security/harden-runner v2.22.3.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: robnester-rh, acepresso, bohdanmar

Merge Risk: Minimal · up to 88caa

The action pin update is limited in scope and presents no identified merge-blocking risk.

Pre-merge checks: 5

Check name	Status	Explanation
Title check		The title clearly identifies the update of step-security/harden-runner to v2.22.3, which is the main change.
Description check		The description directly describes the action version update and includes relevant release notes and configuration details.
Docstring Coverage		No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (4 skipped: 4 unsupported.)

Finishing Touches

Generate unit tests (beta)

• Commit to this branch
• Create a new PR