🔒 update publish workflow endpoints

Signed-off-by: Eden Ross Duff, MSc, DDiv <rjdbcm@outlook.com>
OZI-Project · Nov 6, 2024 · acab398 · acab398
1 parent afdc649
commit acab398
Showing 1 changed file with 7 additions and 3 deletions.
diff --git a/.github/workflows/ozi.yml b/.github/workflows/ozi.yml
@@ -215,9 +215,13 @@ jobs:
         disable-sudo: true
         egress-policy: block
         allowed-endpoints: >
-          api.github.com:443
-          upload.pypi.org:443
-          uploads.github.com:443
+            github.com:443
+            api.github.com:443
+            upload.pypi.org:443
+            uploads.github.com:443
+            tuf-repo-cdn.sigstore.dev:443
+            fulcio.sigstore.dev:443
+            rekor.sigstore.dev:443
 
     - uses: OZI-Project/publish@1.4.1
       with: