[deep-report] Add github.com + api.github.com to Daily Cache Strategy Analyzer firewall allowlist

[github-actions]

Context

Identified by DeepReport intelligence briefing 2026-05-12 (Daily Audit #31591).

The Daily Cache Strategy Analyzer workflow (codex engine) has firewall friction: 2 of 48 requests blocked (4%) — it attempts api.github.com:443 and github.com:443 against an OpenAI-only allowlist. This is the only workflow accounting for firewall blocks in the most recent 24h window.

Expected Impact

• Eliminates ongoing firewall blocks (4% block rate)
• Brings firewall hygiene closer to 0 blocks across the fleet
• Removes a recurring item from daily audit reports

Suggested Approach (pick one)

• (a) Add github.com and api.github.com to that workflow's network.allowed-domains
• (b) Route GitHub access through the github MCP server instead of direct HTTP

Option (b) is the cleaner long-term fix; option (a) is the faster patch.

Suggested Agent

Any coding agent — single workflow edit.

Estimated Effort

30 minutes of agent time.

---

Source: DeepReport 2026-05-12 #aw_dr6

Generated by DeepReport - Intelligence Gathering Agent · ● 9.5M · ◷

• expires on May 14, 2026, 3:42 PM UTC