From 8fbc72122373980ea273a56f16733c5abea37467 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9sar=20Arroba?=
 <19954079+cesararroba@users.noreply.github.com>
Date: Tue, 30 Jun 2026 17:43:02 +0200
Subject: [PATCH] ci(workflows): allowlist nodejs.org and Iconify endpoints in
 UI tests harden-runner (#11744)

---
 .github/workflows/ui-tests.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/ui-tests.yml b/.github/workflows/ui-tests.yml
index 2dc50a26bb..f406b24e81 100644
--- a/.github/workflows/ui-tests.yml
+++ b/.github/workflows/ui-tests.yml
@@ -37,8 +37,12 @@ jobs:
           allowed-endpoints: >
             github.com:443
             registry.npmjs.org:443
+            nodejs.org:443
             fonts.googleapis.com:443
             fonts.gstatic.com:443
+            api.iconify.design:443
+            api.simplesvg.com:443
+            api.unisvg.com:443
             api.github.com:443
             release-assets.githubusercontent.com:443
             cdn.playwright.dev:443