allow api.securityscorecards.dev

Signed-off-by: cpanato <ctadeu@gmail.com>
kubernetes · Mar 30, 2024 · 9b5fed3 · 9b5fed3
1 parent f935bfc
commit 9b5fed3
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/.github/workflows/depsreview.yml b/.github/workflows/depsreview.yml
@@ -1,12 +1,15 @@
 name: 'Dependency Review'
-on: [pull_request]
+
+on:
+  pull_request:
 
 permissions:
   contents: read
 
 jobs:
   dependency-review:
     runs-on: ubuntu-latest
+
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
@@ -16,6 +19,7 @@ jobs:
           allowed-endpoints: >
             api.github.com:443
             github.com:443
+            api.securityscorecards.dev:443
 
       - name: 'Checkout Repository'
         uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2