From 3f7151915f9c935ebcfc29a8da1aa6552c9ee8cd Mon Sep 17 00:00:00 2001 From: Brian Muenzenmeyer Date: Fri, 25 Sep 2026 08:30:01 -0500 Subject: [PATCH] chore: standardize egress policy for cloudflare across all workflows --- .github/workflows/deploy.yml | 3 +-- .github/workflows/update-links.yml | 2 +- 2 files changed, 2 insertions(+), 3 deletions(-) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 769f8f7a..6758690d 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -20,8 +20,7 @@ jobs: with: egress-policy: block allowed-endpoints: > - sparrow.cloudflare.com:443 - api.cloudflare.com:443 + *.cloudflare.com:443 api.github.com:443 github.com:443 hooks.slack.com:443 diff --git a/.github/workflows/update-links.yml b/.github/workflows/update-links.yml index 86ce839a..5367eafd 100644 --- a/.github/workflows/update-links.yml +++ b/.github/workflows/update-links.yml @@ -29,7 +29,7 @@ jobs: egress-policy: block allowed-endpoints: > api.github.com:443 - api.cloudflare.com:443 + *.cloudflare.com:443 dist-prod.07be8d2fbc940503ca1be344714cb0d1.r2.cloudflarestorage.com:443 github.com:443 hooks.slack.com:443