Bump step-security/harden-runner from 2.4.1 to 2.5.0 #369

	name: Coveralls

	on:
	pull_request:
	branches: [ master ]
	paths:
	- 'meson.build'
	- '.github/workflows/**'
	- '**.c'
	push:
	branches: [ master ]
	paths:
	- 'meson.build'
	- '.github/workflows/**'
	- '**.c'

	permissions: # added using https://github.com/step-security/secure-workflows
	contents: read

	jobs:
	build:
	permissions:
	checks: write # for coverallsapp/github-action to create new checks
	contents: read # for actions/checkout to fetch code
	runs-on: ubuntu-latest
	strategy:
	fail-fast: false
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@cba0d00b1fc9a034e1e642ea0f1103c282990604
	with:
	egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs

	- name: Checkout
	uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
	- name: Install packages
	run: sudo apt-get install build-essential gcc clang meson lcov
	- name: Setup
	run: meson setup builddir/ -Db_coverage=true
	- name: Compile with (${{ env.CC }})
	run: meson compile -C builddir/ -v
	- name: Test
	run: meson test -C builddir/ -v
	- name: Coverage
	run: ninja -C builddir/ coverage
	- name: Coveralls GitHub Action
	uses: coverallsapp/github-action@95b1a2355bd0e526ad2fd62da9fd386ad4c98474
	with:
	github-token: ${{ secrets.GITHUB_TOKEN }}
	path-to-lcov: builddir/meson-logs/coverage.info

Provide feedback