Fix workflows for scorecards and publish (#140)

* Update node version * Add allowed-endpoints in the scorecards workflow
kommitters · Apr 24, 2024 · b1ee384 · b1ee384
1 parent fff3a47
commit b1ee384
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
@@ -23,7 +23,7 @@ jobs:
       # Setup .npmrc file to publish to npm
       - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
         with:
-          node-version: "16.x"
+          node-version: 20.x
           registry-url: "https://registry.npmjs.org"
       - run: yarn install --immutable --immutable-cache --check-cache
       - run: npm publish

diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
@@ -34,7 +34,10 @@ jobs:
             fulcio.sigstore.dev:443
             github.com:443
             rekor.sigstore.dev:443
+            *.sigstore.dev:443
             sigstore-tuf-root.storage.googleapis.com:443
+            oss-fuzz-build-logs.storage.googleapis.com:443
+            www.bestpractices.dev:443
 
       - name: "Checkout code"
         uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3