Add allowed endpoints (#129)

* Add allowed endpoint to golangci workflow * Add allowed endpoint to golang builder workflow * Add allowed endpoint to dependency review workflow * Add allowed endpoint to sonatype nacy workflow * Add allowed endpoint to trivy workflow
wabarc · Oct 18, 2023 · f7cb006 · f7cb006
1 parent c81619d
commit f7cb006
Show file tree

Hide file tree

Showing 5 changed files with 6 additions and 3 deletions.
diff --git a/.github/workflows/reusable-builder-go.yml b/.github/workflows/reusable-builder-go.yml
@@ -82,6 +82,7 @@ jobs:
             proxy.golang.org:443
             sum.golang.org:443
             storage.googleapis.com:443
+            *.actions.githubusercontent.com:443
 
       - name: Check out code base
         if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'

diff --git a/.github/workflows/reusable-dependency-review.yml b/.github/workflows/reusable-dependency-review.yml
@@ -41,6 +41,7 @@ jobs:
             github.com:443
             api.github.com:443
             actions-results-receiver-production.githubapp.com:443
+            *.actions.githubusercontent.com:443
 
       - name: Check out code base
         if: github.event_name == 'push' || github.event_name == 'schedule'
@@ -76,4 +77,3 @@ jobs:
           deny-licenses: ${{ inputs.deny-licenses }}
           base-ref: ${{ github.event.repository.default_branch }}
           head-ref: ${{ github.sha }}
-
diff --git a/.github/workflows/reusable-golangci.yml b/.github/workflows/reusable-golangci.yml
@@ -44,6 +44,7 @@ jobs:
             github.com:443
             api.github.com:443
             objects.githubusercontent.com:443
+            *.actions.githubusercontent.com:443
             raw.githubusercontent.com:443
             storage.googleapis.com:443
             proxy.golang.org:443

diff --git a/.github/workflows/reusable-nancy.yml b/.github/workflows/reusable-nancy.yml
@@ -25,8 +25,7 @@ jobs:
             github.com:443
             api.github.com:443
             objects.githubusercontent.com:443
-            acghubeus1.actions.githubusercontent.com:443
-            pipelinesghubeus2.actions.githubusercontent.com:443
+            *.actions.githubusercontent.com:443
             dl-cdn.alpinelinux.org:443
             ossindex.sonatype.org:443
             proxy.golang.org:443

diff --git a/.github/workflows/reusable-trivy.yml b/.github/workflows/reusable-trivy.yml
@@ -48,6 +48,7 @@ jobs:
             api.github.com:443
             uploads.github.com:443
             pkg-containers.githubusercontent.com:443
+            *.actions.githubusercontent.com:443
 
       - name: Check out code base
         if: github.event_name == 'push'
@@ -105,6 +106,7 @@ jobs:
             api.github.com:443
             uploads.github.com:443
             pkg-containers.githubusercontent.com:443
+            *.actions.githubusercontent.com:443
 
       - name: Check out code base
         if: github.event_name == 'push'