Skip to content

chore(deps): update dependency moment to v2.31.0 [security] j:cdx-227 - #1566

Merged
alexprudhomme merged 1 commit into
masterfrom
renovate/npm-moment-vulnerability
Oct 7, 2026
Merged

alexprudhomme merged 1 commit into
masterfrom
renovate/npm-moment-vulnerability

chore(deps): update dependency moment to v2.31.0 [security] j:cdx-227

df0c14b
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Harden-Runner succeeded Oct 5, 2026 in 4m 58s

No anomalous activity on CI/CD runners

No new Harden-Runner detections for this pull request.


Approve a check

If you need to approve a check, [please open a ticket with the SOC](https://coveord.atlassian.net/servicedesk/customer/portal/116/group/640/create/1324) Unsure whether the check should be approved? Open a ticket as well

Please include a link to the check.

We can create an exclusion if the call is expected. In the ticket, please specify the expected scope of the call: job, workflow, repository, or the entire org.

Re-run a check

To re-run a check, go to Conversation and add the following comment:

@stepsecurity-app checks re-run

The check should re-run automatically. If it does not, open a ticket with the SOC

Please include a link to the check.

No check should take more than 15 minutes. You can re-run a check if it does.

Details

Harden-Runner monitors all outbound traffic from each job at the DNS and network layers to ensure that CI/CD runners do not communicate with unauthorized destinations.
This reduces the risk of CI/CD secrets and source code being exfiltrated.

📋 Monitored GitHub Actions workflow runs

The following GitHub Actions workflow runs were monitored as part of this pull request.

Workflow Run ID Unique Destinations Actions Used Detailed Insights
pr-title-semantic-lint.yml 37267079500 - - Harden-Runner not enabled
codeql-analysis.yml 37267079453 - - Harden-Runner not enabled
git-lock-success.yml 37267079426 - - Harden-Runner not enabled
build.yml 37267079373 - - Harden-Runner not enabled
package-lock-version-succes.yml 37267079307 - - Harden-Runner not enabled
dependency-review.yml 37267080199 3 4 View Insights
package-lock-root-success.yml 37267079586 - - Harden-Runner not enabled
prbot.yml 37267079404 - - Harden-Runner not enabled
merge-bot.yml 37267079338 - - Harden-Runner not enabled
package-lock-version-fail.yml 37267079346 - - Harden-Runner not enabled

📚 Learn More

You can learn more about this GitHub check here