Dylan M. Taylor 2edf8b6175 ci: address review findings for Harden-Runner egress policy ...

- Add allowed-endpoints to ast-grep.yml matching test-ast-grep.yml
- Add pypi.org and files.pythonhosted.org to sonarcloud.yml for Python coverage
- Add packages.microsoft.com:443 and https mirrors to apt allowed-endpoints
- Set unvalidated reusable workflows (release, docker-build, gate, etc.) to audit mode

2026-11-10 08:26:20 -05:00

..

ast-grep.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

changed-paths.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

docker-build.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

flatpak-oci.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

freebsd.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

gate.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

git-sources.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

house-rules.yml

ci: add allowed-endpoints to packaging-lint and house-rules workflows

2026-11-10 08:26:20 -05:00

nix.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

packaging-lint.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

refresh-contributors.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

release.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

sonar-scan.yml

ci(sonar): skip SonarCloud scan on fork pull requests (#48)

2026-10-21 19:04:08 -04:00

sonarcloud.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

supply-chain.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

test-ast-grep.yml

ci: specify allowed-endpoints for block mode in workflows

2026-11-10 08:26:20 -05:00

test-freebsd.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

test-house-rules.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

test-install-apt-packages.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00

windows-arm64.yml

ci: address review findings for Harden-Runner egress policy

2026-11-10 08:26:20 -05:00