Add CodeQL workflow

Add npm audit to the node workflow Remove stepsecurity action from workflows
2022-01-20 21:45:07 +05:30
parent 2ee6797b63
commit 14a9f0b4ae
4 changed files with 32 additions and 20 deletions
@@ -17,14 +17,6 @@ jobs:
      contents: read
      packages: write
    steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@v1
-        with:
-          allowed-endpoints:
-            github.com:443
-            npm.pkg.github.com:443
-            registry.npmjs.org:443
-
      - name: Checkout release
        if: github.event_name != 'workflow_dispatch'
        uses: actions/checkout@v2