Merge pull request #20 from OZI-Project/rjdbcm-patch-3

Update dependency-review.yml
OZI-Project · Jan 24, 2024 · 0e6bbf3 · 0e6bbf3
2 parents 6194054 + fa26573
commit 0e6bbf3
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -19,7 +19,11 @@ jobs:
       - name: Harden Runner
         uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
         with:
-          egress-policy: audit
+          disable-sudo: true
+          egress-policy: block
+          allowed-endpoints: >
+            api.github.com:443
+            github.com:443
 
       - name: 'Checkout Repository'
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1