From aabe2854e0aafcf70aa0c8cede12143d5d38e3c6 Mon Sep 17 00:00:00 2001
From: Wayback Archiver <66856220+waybackarchiver@users.noreply.github.com>
Date: Sat, 3 Dec 2022 16:48:53 +0000
Subject: [PATCH] Add allowed endpoints to scorecards workflow

---
 .github/workflows/reusable-scorecards.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/reusable-scorecards.yml b/.github/workflows/reusable-scorecards.yml
index ce63a97..9fcdc31 100644
--- a/.github/workflows/reusable-scorecards.yml
+++ b/.github/workflows/reusable-scorecards.yml
@@ -55,6 +55,7 @@ jobs:
             api.securityscorecards.dev:443
             bestpractices.coreinfrastructure.org:443
             sigstore-tuf-root.storage.googleapis.com:443
+            ghcr.io:443
 
       - name: Check out code base
         if: github.event_name == 'push' || github.event_name == 'schedule'