ci: Improve security of docs workflow (#270)

skarllot · Jun 28, 2024 · 45fc070 · 45fc070
1 parent 594c830
commit 45fc070
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
@@ -73,7 +73,10 @@ jobs:
       - name: 🛡️ Harden Runner
         uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
         with:
-          egress-policy: audit
+          disable-sudo: true
+          egress-policy: block
+          allowed-endpoints: >
+            api.github.com:443
       - name: 🚀 Deploy to GitHub Pages
         id: deployment
         uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5