diff --git a/.github/workflows/images_build_test.yml b/.github/workflows/images_build_test.yml index df77203b3..db7564339 100644 --- a/.github/workflows/images_build_test.yml +++ b/.github/workflows/images_build_test.yml @@ -165,7 +165,7 @@ jobs: matrix: os: ${{ fromJson(needs.init_build.outputs.os) }} - runs-on: ubuntu-latest + runs-on: runs-on: [self-hosted, ubuntu] permissions: contents: read id-token: write @@ -175,7 +175,7 @@ jobs: uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 with: disable-sudo: true - egress-policy: block + egress-policy: audit allowed-endpoints: > api.github.com:443 archive.ubuntu.com:80