From 31b645ee5325ce2283ce215e2f8f3cd43e8313d1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Pedro=20Mart=C3=ADn?= Date: Tue, 14 Apr 2026 10:09:54 +0200 Subject: [PATCH] chore(github): allow GitHub release CDN in trivy scan allowlist (#10679) --- .github/workflows/mcp-container-checks.yml | 3 +++ .github/workflows/sdk-container-checks.yml | 1 + .github/workflows/ui-container-checks.yml | 2 ++ 3 files changed, 6 insertions(+) diff --git a/.github/workflows/mcp-container-checks.yml b/.github/workflows/mcp-container-checks.yml index 665153f1f1..a8f760544f 100644 --- a/.github/workflows/mcp-container-checks.yml +++ b/.github/workflows/mcp-container-checks.yml @@ -87,6 +87,9 @@ jobs: api.github.com:443 mirror.gcr.io:443 check.trivy.dev:443 + get.trivy.dev:443 + release-assets.githubusercontent.com:443 + objects.githubusercontent.com:443 - name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 diff --git a/.github/workflows/sdk-container-checks.yml b/.github/workflows/sdk-container-checks.yml index 19d11647c4..d0a46a8c98 100644 --- a/.github/workflows/sdk-container-checks.yml +++ b/.github/workflows/sdk-container-checks.yml @@ -85,6 +85,7 @@ jobs: check.trivy.dev:443 debian.map.fastlydns.net:80 release-assets.githubusercontent.com:443 + objects.githubusercontent.com:443 pypi.org:443 files.pythonhosted.org:443 www.powershellgallery.com:443 diff --git a/.github/workflows/ui-container-checks.yml b/.github/workflows/ui-container-checks.yml index 56c9dd13f4..04775fce25 100644 --- a/.github/workflows/ui-container-checks.yml +++ b/.github/workflows/ui-container-checks.yml @@ -89,6 +89,8 @@ jobs: mirror.gcr.io:443 check.trivy.dev:443 get.trivy.dev:443 + release-assets.githubusercontent.com:443 + objects.githubusercontent.com:443 - name: Checkout repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2