From b10d648d078c6e39dbb3eb7bc41911ad81c111e3 Mon Sep 17 00:00:00 2001 From: Jeremy Frasier Date: Sat, 18 Jan 2025 12:51:52 -0500 Subject: [PATCH] Uncomment the GitHubSecurityLab/actions-permissions/monitor@v1 job We are no longer emulating ARM under QEMU, so using this GitHub Action no longer causes the runners to run out of resources and crash. --- .github/workflows/build.yml | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 25b4974..abfa174 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -200,13 +200,10 @@ jobs: scenario: - default steps: - # With this task in place the GitHub runners run out of - # resources and crash. See cisagov/skeleton-ansible-role#211 - # for more details. - # - uses: GitHubSecurityLab/actions-permissions/monitor@v1 - # with: - # # Uses the organization variable unless overridden - # config: ${{ vars.ACTIONS_PERMISSIONS_CONFIG }} + - uses: GitHubSecurityLab/actions-permissions/monitor@v1 + with: + # Uses the organization variable unless overridden + config: ${{ vars.ACTIONS_PERMISSIONS_CONFIG }} - id: harden-runner name: Harden the runner uses: step-security/harden-runner@v2