adjusted egress policy to match recommendation

jksolbakken · Jul 10, 2024 · 1e8fdec · 1e8fdec
1 parent f0f6a98
commit 1e8fdec
Showing 1 changed file with 10 additions and 8 deletions.
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
@@ -26,14 +26,16 @@ jobs:
           disable-sudo: true
           egress-policy: block
           allowed-endpoints: >
-            api.osv.dev:443 
-            api.securityscorecards.dev:443 
-            bestpractices.coreinfrastructure.org:443 
-            fulcio.sigstore.dev:443 
-            github.com:443 
-            api.github.com:443 
-            rekor.sigstore.dev:443 
-            sigstore-tuf-root.storage.googleapis.com:443 
+            api.github.com:443
+            api.osv.dev:443
+            api.securityscorecards.dev:443
+            bestpractices.coreinfrastructure.org:443
+            fulcio.sigstore.dev:443
+            github.com:443
+            oss-fuzz-build-logs.storage.googleapis.com:443
+            rekor.sigstore.dev:443
+            sigstore-tuf-root.storage.googleapis.com:443
+            tuf-repo-cdn.sigstore.dev:443
             www.bestpractices.dev:443
       
       - name: "Checkout code"