chore: fix scorecard action acls (GoogleCloudPlatform#238)

Kenneth Rosario · web-flow · commit bc1ca57738ad · 2023-09-25T11:38:11.000-07:00
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
@@ -31,18 +31,17 @@ jobs:
           disable-sudo: true
           egress-policy: block
           allowed-endpoints: >
-            api.github.com:443
             api.osv.dev:443
             api.securityscorecards.dev:443
             auth.docker.io:443
             bestpractices.coreinfrastructure.org:443
-            fulcio.sigstore.dev:443
             github.com:443
             index.docker.io:443
             oss-fuzz-build-logs.storage.googleapis.com:443
             sigstore-tuf-root.storage.googleapis.com:443
-            rekor.sigstore.dev:443
             www.bestpractices.dev:443
+            *.sigstore.dev:443
+            *.github.com:443
           
       - name: "Checkout code"
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
