Merge pull request #193 from onebeyond/fix-cd-action

fix: revert to egress-policy: audit for cd gh action
onebeyond · Jan 31, 2024 · 560772d · 560772d
2 parents 04f4bce + c01c736
commit 560772d
Showing 1 changed file with 8 additions and 7 deletions.
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
@@ -19,13 +19,14 @@ jobs:
         uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
         with:
           disable-sudo: true
-          egress-policy: block
-          allowed-endpoints: >
-            github.com:443
-            registry.npmjs.org:443
-            api.github.com:443
-            nodejs.org:443
-            fulcio.sigstore.dev:443
+          egress-policy: audit
+          # egress-policy: block
+          # allowed-endpoints: >
+          #   github.com:443
+          #   registry.npmjs.org:443
+          #   api.github.com:443
+          #   nodejs.org:443
+          #   fulcio.sigstore.dev:443
 
       - name: ⚙️ Git Checkout
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1