[renovate]

This PR contains the following updates:

Package	Type	Update	Change
step-security/harden-runner	action	patch	v2.22.1 → v2.22.2

---

Release Notes

step-security/harden-runner

v2.22.2

Compare Source

What's Changed

• Fixed inbound (ingress) network traffic being incorrectly classified as outbound (egress) traffic on macOS
• Fixed implicit endpoints intended for self-hosted runners being applied to custom VM environments on Linux (enterprise tier)
• Improved network and DNS tracing, enforcement logic, and process information correlation on Linux (enterprise tier)

Full Changelog: step-security/harden-runner@v2.22.1...v2.22.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

No actionable comments were generated in the recent review.

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Enterprise
• Run ID: fd1c28f5-c1aa-44f6-a7d0-8d0484f6e1b4

Commits

Reviewing files that changed from the base of the PR and between 92e3695 and 37e0474.

Files selected for processing: 2

• .github/workflows/pre-merge-ci.yaml
• .github/workflows/scorecards.yml

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 4 remain after this review.

Walkthrough

The pre-merge CI and Scorecard workflows now pin step-security/harden-runner to the v2.22.2 commit instead of v2.22.1.

Changes: Harden Runner Pin Update

Layer / File(s)	Summary
Update workflow action pins .github/workflows/pre-merge-ci.yaml, .github/workflows/scorecards.yml	Both workflows update the pinned step-security/harden-runner action from v2.22.1 to v2.22.2.

Priority: Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: simonbaird, acepresso

Merge Risk: Minimal · up to 37e04

The workflow action pins are updated consistently; no merge-blocking risk remains.

Pre-merge checks: 5

Check name	Status	Explanation
Title check		The title states the main change: the step-security/harden-runner action is updated from v2.22.1 to v2.22.2. The changeset updates that pin in two workflow files, so the title matches the change.
Description check		The description names the action, the version bump from v2.22.1 to v2.22.2, and the release notes. It matches the workflow pin updates in the changeset.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (2 skipped: 2 unsupported.)

Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

_{Comment @coderabbitai help to get the list of available commands.}