Update allowed endpoints due to scorecard upgrade

kommitters · Jan 13, 2023 · 18b327d · 18b327d
1 parent cb0ec00
commit 18b327d
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
@@ -29,9 +29,11 @@ jobs:
           allowed-endpoints: >
             api.github.com:443
             api.osv.dev:443
+            api.securityscorecards.dev:443
             bestpractices.coreinfrastructure.org:443
             fulcio.sigstore.dev:443
             github.com:443
+            rekor.sigstore.dev:443
             sigstore-tuf-root.storage.googleapis.com:443
 
       - name: "Checkout code"