diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json index 221e86f..1b7dc05 100644 --- a/.devcontainer/devcontainer.json +++ b/.devcontainer/devcontainer.json @@ -1,7 +1,7 @@ // For format details, see https://aka.ms/devcontainer.json. For config options, see the // README at: https://github.com/devcontainers/templates/tree/main/src/ubuntu { - "name": "Base Python 3", + "name": "GitHub Centralized Workflows", // Or use a Dockerfile or Docker Compose file. More info: https://containers.dev/guide/dockerfile "image": "mcr.microsoft.com/devcontainers/python@sha256:672331fb5736373404e965211a877fdabda822c3d93b85fc90ed00165241b556", diff --git a/.github/workflows/security-ossf-scorecard.yml b/.github/workflows/security-ossf-scorecard.yml index d3fa025..63aa24c 100644 --- a/.github/workflows/security-ossf-scorecard.yml +++ b/.github/workflows/security-ossf-scorecard.yml @@ -41,7 +41,7 @@ jobs: if: ${{ inputs.harden_runner != false }} with: disable-sudo: true - egress-policy: audit + egress-policy: block allowed-endpoints: > api.github.com:443 api.osv.dev:443