fix: revert to egress-policy: audit for cd gh action

onebeyond · Jan 31, 2024 · c01c736 · c01c736
1 parent 04f4bce
commit c01c736
Showing 1 changed file with 8 additions and 7 deletions.
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
@@ -19,13 +19,14 @@ jobs:
  uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895 # v2.6.1
  with:
  disable-sudo: true
- egress-policy: block
- allowed-endpoints: >
- github.com:443
- registry.npmjs.org:443
- api.github.com:443
- nodejs.org:443
- fulcio.sigstore.dev:443
+ egress-policy: audit
+ # egress-policy: block
+ # allowed-endpoints: >
+ # github.com:443
+ # registry.npmjs.org:443
+ # api.github.com:443
+ # nodejs.org:443
+ # fulcio.sigstore.dev:443
 
  - name: ⚙️ Git Checkout
  uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1