Update step-security/harden-runner action to v2.10.1

[renovate[bot]]

This PR contains the following updates:

Package	Type	Update	Change
step-security/harden-runner	action	minor	v2.9.1 -> v2.10.1

---

Release Notes

step-security/harden-runner (step-security/harden-runner)

### [`v2.10.1`](https://redirect.github.com/step-security/harden-runner/releases/tag/v2.10.1) [Compare Source](https://redirect.github.com/step-security/harden-runner/compare/v2.10.0...v2.10.1) ##### What's Changed Release v2.10.1 by [@​varunsh-coder](https://redirect.github.com/varunsh-coder) in [https://github.com/step-security/harden-runner/pull/463](https://redirect.github.com/step-security/harden-runner/pull/463) Bug fix: Resolves an issue where DNS resolution of .local domains was failing when using a Kind cluster in a GitHub Actions workflow. **Full Changelog**: https://github.com/step-security/harden-runner/compare/v2...v2.10.1 ### [`v2.10.0`](https://redirect.github.com/step-security/harden-runner/releases/tag/v2.10.0) [Compare Source](https://redirect.github.com/step-security/harden-runner/compare/v2.9.1...v2.10.0) #### What's Changed Release v2.10.0 by [@​h0x0er](https://redirect.github.com/h0x0er) and [@​varunsh-coder](https://redirect.github.com/varunsh-coder) in [https://github.com/step-security/harden-runner/pull/455](https://redirect.github.com/step-security/harden-runner/pull/455) **ARM Support**: Harden-Runner Enterprise tier now supports GitHub-hosted ARM runners. This includes all the features that apply to previously supported GitHub-hosted x64 Linux runners. **Full Changelog**: https://github.com/step-security/harden-runner/compare/v2...v2.10.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions[bot]]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/step-security/harden-runner	91182cccc01eb5e619899d80e4e971d6181294a7	:green_circle: 8.7	Details Check Score Reason Binary-Artifacts :green_circle: 10 no binaries found in the repo Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration CI-Tests :green_circle: 10 11 out of 11 merged PRs checked by a CI test -- score normalized to 10 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected Code-Review :green_circle: 10 all changesets reviewed Contributors :green_circle: 6 project has 2 contributing companies or organizations -- score normalized to 6 Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Dependency-Update-Tool :green_circle: 10 update tool detected Fuzzing :warning: 0 project is not fuzzed License :green_circle: 10 license file detected Maintained :green_circle: 10 30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 Packaging :warning: -1 packaging workflow not detected Pinned-Dependencies :green_circle: 7 dependency not pinned by hash detected -- score normalized to 7 SAST :green_circle: 9 SAST tool detected but not run on all commits Security-Policy :green_circle: 10 security policy file detected Signed-Releases :warning: -1 no releases found Token-Permissions :green_circle: 10 GitHub workflow tokens follow principle of least privilege Vulnerabilities :green_circle: 9 1 existing vulnerabilities detected

Scanned Manifest Files

.github/workflows/scorecard.yml

• step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7
• step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde