Update python-app.yml

Nick2bad4u · Jun 2, 2024 · 68d0f01 · 68d0f01
1 parent 6302327
commit 68d0f01
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/.github/workflows/python-app.yml b/.github/workflows/python-app.yml
@@ -21,7 +21,14 @@ jobs:
     - name: Harden Runner
       uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0
       with:
-        egress-policy: audit
+        disable-sudo: true
+        egress-policy: block
+        allowed-endpoints: >
+          api.github.com:443
+          files.pythonhosted.org:443
+          github.com:443
+          objects.githubusercontent.com:443
+          pypi.org:443
 
     - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
     - name: Set up Python 3.11.8