Apply harden-runner suggested policy.

ubernostrum · Jun 10, 2023 · 769216c · 769216c
1 parent 13fc9d0
commit 769216c
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -30,7 +30,14 @@ jobs:
       - name: Harden Runner
         uses: step-security/harden-runner@128a63446a954579617e875aaab7d2978154e969 # v2.4.0
         with:
-          egress-policy: audit
+          disable-sudo: true
+          egress-policy: block
+          allowed-endpoints: >-
+            docs.djangoproject.com:443
+            docs.python.org:443
+            files.pythonhosted.org:443
+            github.com:443
+            pypi.org:443
       - uses: actions/checkout@v3
       - uses: actions/setup-python@v4
         with: