From 62398a0b6da5a2880e93cee8f88c2f790f4ba8e4 Mon Sep 17 00:00:00 2001 From: jt-dd Date: Thu, 25 Jul 2024 10:59:01 +0200 Subject: [PATCH] enabling audit mod to list all endpoints to whitelest --- .github/workflows/docker.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index 4560ef359..ad33a33ce 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -38,7 +38,7 @@ jobs: uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 with: # egress-policy: audit - egress-policy: block + egress-policy: audit allowed-endpoints: > auth.docker.io:443 dl-cdn.alpinelinux.org:443 @@ -68,6 +68,8 @@ jobs: results-receiver.actions.githubusercontent.com:443 vstsmms.actions.githubusercontent.com:443 raw.githubusercontent.com:443 + nodejs.org:443 + iojs.org:443 - name: Checkout uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab