Merge pull request #527 from navapbc/mqwebster/lambda-updates

Add some new allowed domains

Author: mdragon

.github/workflows/build.yml

@@ -71,7 +71,7 @@ jobs:
           show-progress: "false"
           persist-credentials: "false"
           ref: ${{ inputs.ref }}
-      - uses: actions/setup-go@v6.2.0
+      - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           go-version-file: go.mod
@@ -124,7 +124,7 @@ jobs:
         with:
           name: ${{ needs.prepare.outputs.sources-key }}
           path: .
-      - uses: actions/setup-go@v6.2.0
+      - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           go-version-file: go.mod
@@ -244,7 +244,7 @@ jobs:
         with:
           name: ${{ needs.prepare.outputs.sources-key }}
           path: .
-      - uses: actions/setup-go@v6.2.0
+      - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           go-version-file: go.mod

.github/workflows/qa.yml

@@ -40,7 +40,7 @@ jobs:
             ./bin
             ./cover.out
             ./cover.html
-      - uses: actions/setup-go@v6.2.0
+      - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           go-version-file: go.mod
@@ -84,7 +84,7 @@ jobs:
             ./bin
             ./cover.out
             ./cover.html
-      - uses: actions/setup-go@v6.2.0
+      - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           go-version-file: go.mod
@@ -106,15 +106,21 @@ jobs:
           disable-sudo: true
           egress-policy: block
           allowed-endpoints: >
+            actions-results-receiver-production.githubapp.com:443
+            api.github.com:443
             github.com:443
+            objects.githubusercontent.com:443
             proxy.golang.org:443
             sum.golang.org:443
+            raw.githubusercontent.com:443
+            storage.googleapis.com:443
+            release-assets.githubusercontent.com:443
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: ${{ inputs.ref }}
           show-progress: "false"
           persist-credentials: "false"
-      - uses: actions/setup-go@v6.2.0
+      - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           go-version-file: go.mod
@@ -132,16 +138,21 @@ jobs:
           disable-sudo: true
           egress-policy: block
           allowed-endpoints: >
+            actions-results-receiver-production.githubapp.com:443
+            api.github.com:443
             github.com:443
+            objects.githubusercontent.com:443
             proxy.golang.org:443
             sum.golang.org:443
+            raw.githubusercontent.com:443
             storage.googleapis.com:443
+            release-assets.githubusercontent.com:443
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: ${{ inputs.ref }}
           show-progress: "false"
           persist-credentials: "false"
-      - uses: actions/setup-go@v6.2.0
+      - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           go-version-file: go.mod
@@ -181,7 +192,7 @@ jobs:
             ./bin
             ./cover.out
             ./cover.html
-      - uses: actions/setup-go@v6.2.0
+      - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           go-version-file: go.mod

.github/workflows/terraform-plan.yml

@@ -112,6 +112,8 @@ jobs:
             objects.githubusercontent.com:443
             registry.terraform.io:443
             releases.hashicorp.com:443
+            hosted-compute-watchdog-prod-eus-01.githubapp.com:443
+            release-assets.githubusercontent.com:443
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           ref: ${{ inputs.ref }}