Add new allowed endpoints (#424)

step-security · Aug 9, 2023 · a052122 · a052122
1 parent e6008c3
commit a052122
Showing 1 changed file with 2 additions and 7 deletions.
diff --git a/agent.go b/agent.go
@@ -289,15 +289,10 @@ func addImplicitEndpoints(endpoints map[string][]Endpoint, disableTelemetry bool
 
 	implicitEndpoints := []Endpoint{
 
-		{domainName: "pipelines.actions.githubusercontent.com", port: 443},           // GitHub
-		{domainName: "artifactcache.actions.githubusercontent.com", port: 443},       // GitHub
+		{domainName: "*.actions.githubusercontent.com.", port: 443},                  // GitHub
 		{domainName: "codeload.github.com", port: 443},                               // GitHub
-		{domainName: "token.actions.githubusercontent.com", port: 443},               // GitHub
-		{domainName: "vstoken.actions.githubusercontent.com", port: 443},             // GitHub
-		{domainName: "vstsmms.actions.githubusercontent.com", port: 443},             // GitHub
 		{domainName: "actions-results-receiver-production.githubapp.com", port: 443}, // GitHub
-		{domainName: "productionresultssa*.blob.core.windows.net", port: 443},        // GitHub
-
+		{domainName: "productionresultssa*.blob.core.windows.net.", port: 443},       // GitHub
 	}
 
 	for key, val := range endpoints {