From 9bba1d066fcda2cf0e728f81de0705afdc460185 Mon Sep 17 00:00:00 2001 From: Maeve Reilly Date: Mon, 17 Nov 2025 21:46:06 +0000 Subject: [PATCH] fix: add release-assets.githubusercontent.com to allowed domains Fix harden list of allowed domains to include release-assets. --- .github/workflows/conformance.yml | 1 + .github/workflows/unit.yml | 1 + 2 files changed, 2 insertions(+) diff --git a/.github/workflows/conformance.yml b/.github/workflows/conformance.yml index e3ab855c..19a031e4 100644 --- a/.github/workflows/conformance.yml +++ b/.github/workflows/conformance.yml @@ -26,6 +26,7 @@ jobs: objects.githubusercontent.com:443 proxy.golang.org:443 registry.npmjs.org:443 + release-assets.githubusercontent.com:443 storage.googleapis.com:443 sum.golang.org:443 diff --git a/.github/workflows/unit.yml b/.github/workflows/unit.yml index 438efdb0..bc44e35b 100644 --- a/.github/workflows/unit.yml +++ b/.github/workflows/unit.yml @@ -25,6 +25,7 @@ jobs: github.com:443 objects.githubusercontent.com:443 registry.npmjs.org:443 + release-assets.githubusercontent.com:443 - name: Checkout uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2