Bump step-security/harden-runner from 2.10.4 to 2.11.0 #1696

	# This is a github actions workflow that retrieves the modified hips and runs a validator script against them written in Node.
	name: Validate HIP
	on: [pull_request]

	permissions:
	contents: read

	defaults:
	run:
	shell: bash

	jobs:
	ValidateHIP:
	runs-on: improvement-proposals-linux-medium
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
	with:
	egress-policy: audit

	- name: Check out repository code
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	fetch-depth: 0

	- name: Use Node.js
	uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
	with:
	node-version: "12.x"

	- name: Install jq
	run: sudo apt-get install jq

	- name: Validate HIPs
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	run: \|
	PR_NUMBER=${{ github.event.pull_request.number }}
	REPO=${{ github.repository }}
	PR_DATA=$(curl -s -H "Authorization: token $GITHUB_TOKEN" "https://api.github.com/repos/$REPO/pulls/$PR_NUMBER/files")
	MD_FILES=$(echo "$PR_DATA" \| jq -r '.[] \| select(.filename \| test(".md$")) \| .filename')

	for FILE in $MD_FILES; do
	FULL_PATH="${{ github.workspace }}/$FILE"
	if [[ -f "$FULL_PATH" ]]; then
	node "${{ github.workspace }}/scripts/validateHIP.js" "$FULL_PATH"
	else
	echo "No file found for $FILE"
	exit 1
	fi
	done

Provide feedback