Skip to content

Bump actions/upload-artifact from 4.6.2 to 7.0.2 - #126

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/upload-artifact-7.0.2
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/upload-artifact-7.0.2

Bump actions/upload-artifact from 4.6.2 to 7.0.2

c89cd60
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Harden-Runner succeeded Oct 10, 2026 in 7m 17s

No anomalous activity on CI/CD runners

No new Harden-Runner detections for this pull request.

Details

Harden-Runner monitors all outbound traffic from each job at the DNS and network layers to ensure that CI/CD runners do not communicate with unauthorized destinations.
This reduces the risk of CI/CD secrets and source code being exfiltrated.

📋 Monitored GitHub Actions workflow runs

The following GitHub Actions workflow runs were monitored as part of this pull request.

Workflow Run ID Unique Destinations Actions Used Detailed Insights
workflow.yml 38009514817 13 3 View Insights
auto_cherry_pick.yml 38009514911 - - Harden-Runner not enabled
claude_review.yml 38009515068 1 4 View Insights
claude_review.yml 38009514874 1 4 View Insights
auto_cherry_pick.yml 38009514537 - - Harden-Runner not enabled
workflow.yml 38009509261 13 3 View Insights
auto_cherry_pick.yml 38009515006 - - Harden-Runner not enabled
dependency-review.yml 38009514816 3 3 View Insights
claude_review.yml 38009514539 1 4 View Insights

📚 Learn More

You can learn more about this GitHub check here