Bump step-security/harden-runner from 2.14.1 to 2.14.2 67/143367/1
authordependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Mon, 23 Feb 2026 12:23:39 +0000 (12:23 +0000)
committeronap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>
Mon, 23 Feb 2026 12:23:40 +0000 (12:23 +0000)
commitbc61baf776af233023eadd05a94b5a786ea89126
treebfabf6f5395dbcae7c5ab4c6dc017d4658a1b2e2
parent6958176236b8c9d69b587f06764a095213212d27
Bump step-security/harden-runner from 2.14.1 to 2.14.2

## Release notes

Sourced from step-security/harden-runner's releases.

v2.14.2
What's Changed
Security fix: Fixed a medium severity vulnerability where outbound network connections using sendto, sendmsg, and sendmmsg socket system calls could bypass audit logging when using egress-policy: audit. This issue only affects the Community Tier in audit mode; block mode and Enterprise Tier were not affected. See GHSA-cpmj-h4f6-r6pq for details.
Full Changelog: https://github.com/step-security/harden-runner/compare/v2.14.1...v2.14.2

## Commits

5ef0c07 Merge pull request #635 from step-security/rc-34
eb43c7b update agent
See full diff in compare view

![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Issue-ID: CIMAN-33
Signed-off-by: dependabot[bot] <support@github.com>
Change-Id: I0448161bb19995d18cf7d595b319e53a27783a69
GitHub-PR: https://github.com/onap/doc/pull/5
GitHub-Hash: 584c6a923d6909c9
Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>
.github/workflows/call-github2gerrit.yaml