diff --git a/.github/workflows/pypi-release.yml b/.github/workflows/pypi-release.yml index d362586..4d8bf28 100644 --- a/.github/workflows/pypi-release.yml +++ b/.github/workflows/pypi-release.yml @@ -20,8 +20,11 @@ jobs: steps: - uses: step-security/harden-runner@18bf8ad2ca49c14cbb28b91346d626ccfb00c518 # v2.1.0 with: - egress-policy: audit + egress-policy: block disable-sudo: true + allowed-endpoints: > + github.com:443 + upload.pypi.org:443 - name: Checkout repository uses: actions/checkout@v3