diff options
Diffstat (limited to '.github/workflows/codeql-analysis.yml')
-rw-r--r-- | .github/workflows/codeql-analysis.yml | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 4b9aaa7d6..0f9c0f740 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml | |||
@@ -75,14 +75,16 @@ jobs: | |||
75 | 75 | ||
76 | steps: | 76 | steps: |
77 | - name: Harden Runner | 77 | - name: Harden Runner |
78 | uses: step-security/harden-runner@cba0d00b1fc9a034e1e642ea0f1103c282990604 | 78 | uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 |
79 | with: | 79 | with: |
80 | disable-sudo: true | 80 | disable-sudo: true |
81 | egress-policy: block | 81 | egress-policy: block |
82 | allowed-endpoints: > | 82 | allowed-endpoints: > |
83 | api.github.com:443 | 83 | api.github.com:443 |
84 | files.pythonhosted.org:443 | ||
84 | github.com:443 | 85 | github.com:443 |
85 | objects.githubusercontent.com:443 | 86 | objects.githubusercontent.com:443 |
87 | pypi.org:443 | ||
86 | uploads.github.com:443 | 88 | uploads.github.com:443 |
87 | 89 | ||
88 | - name: Checkout repository | 90 | - name: Checkout repository |