Update deploy.yaml

wagov · Mar 31, 2024 · dce1778 · dce1778
1 parent 1752133
commit dce1778
Showing 1 changed file with 13 additions and 3 deletions.
diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
@@ -12,7 +12,17 @@ jobs:
     - name: Harden Runner
       uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
       with:
-        egress-policy: audit
+        egress-policy: block
+        allowed-endpoints: >
+          download.pytorch.org:443
+          files.pythonhosted.org:443
+          github.com:443
+          objects.githubusercontent.com:443
+          pypi.org:443
+          quarto.org:443
+          registry.npmjs.org:443
+          www.quarto.org:443
+
 
     - name: Upload to pages branch
       uses: fastai/workflows/quarto-ghp@6f01ea106ba2b565c66ad88a826bdbc4d7e378c9 # master
@@ -21,7 +31,7 @@ jobs:
     - name: build
       run: ./build.sh
     - name: release upload
-      uses: softprops/action-gh-release@9d7c94cfd0a1f3ed45544c887983e9fa900f0564 # v2.0.4
+      uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1
       if: startsWith(github.ref, 'refs/tags/')
       with:
-        files: dist/*
+        files: dist/*