diff --git a/.github/workflows/sitemap.yml b/.github/workflows/sitemap.yml
index 2fbd585..b7a1df5 100644
--- a/.github/workflows/sitemap.yml
+++ b/.github/workflows/sitemap.yml
@@ -13,7 +13,10 @@ jobs:
     - name: Harden Runner
       uses: step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0
       with:
-        egress-policy: audit
+        disable-sudo: true
+        egress-policy: block
+        allowed-endpoints: >
+          github.com:443
 
     - name: Checkout the repo
       uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6