Update egress policy in CI

btschwertfeger · Dec 10, 2024 · 9abce32 · 9abce32
1 parent ce03ccd
commit 9abce32
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/_codeql.yaml b/.github/workflows/_codeql.yaml
@@ -33,11 +33,11 @@ jobs:
       - name: Harden Runner
         uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
         with:
-          # egress-policy: audit
-          disable-sudo: true
           egress-policy: block
+          disable-sudo: true
           allowed-endpoints: >
             api.github.com:443
+            api.securityscorecards.dev
             github.com:443
             uploads.github.com:443