Skip to content

Commit 9b37f85

Browse files
authored
fix(ci): Add release-assets.githubusercontent.com to allowed endpoints (GoogleCloudPlatform#394)
The CodeQL workflow was failing because the `step-security/harden-runner` was blocking egress traffic to the endpoint used for downloading the CodeQL bundle. The download from `https://github.com/github/codeql-action/releases` redirects to `release-assets.githubusercontent.com`. This change adds `release-assets.githubusercontent.com` to the list of allowed endpoints to resolve the `ECONNREFUSED` error and removes previous incorrect attempts.
1 parent f1dc285 commit 9b37f85

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

.github/workflows/codeql.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,7 @@ jobs:
5151
github.com:443
5252
pypi.org:443
5353
objects.githubusercontent.com:443
54+
release-assets.githubusercontent.com:443
5455
5556
- name: Checkout repository
5657
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

0 commit comments

Comments
 (0)