fleet/.github/workflows/check-ms-protocol-feeds.yml
Ian Littman 18256bdf0e
Add missing step-security hardening action, bump to current version (#38470)
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Chores**
* Upgraded security protections across build and deployment workflows
for enhanced runner environment hardening.
* Strengthened CI/CD infrastructure security measures throughout
automated processes.
  * No direct user-facing changes.

<sub>✏️ Tip: You can customize this high-level summary in your review
settings.</sub>

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-01-19 15:10:48 -06:00

41 lines
1.6 KiB
YAML

name: Check Microsoft MDM related protocol specification feeds for changes
# This action will check Microsoft MDM related protocol specification feeds
# for changes and create a Github issue for MDM engineers to review the changes
on:
schedule:
# Daily at 8:35pm CDT (1:35am UTC) -- run during off-hours to prevent hitting GitHub API rate limit
- cron: "35 1 * * *"
jobs:
check-ms-mdm-protocol-docs:
if: github.event.repository.owner.login == 'fleetdm'
runs-on: ubuntu-latest
permissions:
issues: write
steps:
- name: Harden Runner
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
with:
egress-policy: audit
- name: Check MS-MDE2 feed
uses: git-for-windows/rss-to-issues@07a39c615e25aaf70dc0fd84df7345ca8941d85f # v0.0.12
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
feed: https://winprotocoldocs-bhdugrdyduf5h2e4.b02.azurefd.net/MS-MDE2/%5bMS-MDE2%5d.rss
prefix: "MDM: Review Microsoft MS-MDE2 Proto Change for new Request/Enrollment Versions: "
dry-run: false
max-age: 36h
labels: "#g-mdm"
url-only: true
- name: Check MS-MDM feed
uses: git-for-windows/rss-to-issues@07a39c615e25aaf70dc0fd84df7345ca8941d85f # v0.0.12
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
feed: https://winprotocoldocs-bhdugrdyduf5h2e4.b02.azurefd.net/MS-MDM/%5bMS-MDM%5d.rss
prefix: "MDM: Review Microsoft MS-MDM Proto Change for compatibility: "
dry-run: false
max-age: 36h
labels: "#g-mdm"
url-only: true