From ebcb40aba79056224bae97e79cce5e0bc5ef8934 Mon Sep 17 00:00:00 2001 From: Matthew Helmke Date: Thu, 30 Apr 2026 12:14:55 -0500 Subject: [PATCH] Fix: allow release-assets.githubusercontent.com in AI docs workflow GitHub now redirects release asset downloads to release-assets.githubusercontent.com, which was blocked by harden-runner's egress policy, causing cosign install to fail with curl exit code 6 (could not resolve host). Co-Authored-By: Claude Sonnet 4.6 --- .github/workflows/compile-ai-docs-from-gcs.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/compile-ai-docs-from-gcs.yaml b/.github/workflows/compile-ai-docs-from-gcs.yaml index b4a0535bd4..bc154829fe 100644 --- a/.github/workflows/compile-ai-docs-from-gcs.yaml +++ b/.github/workflows/compile-ai-docs-from-gcs.yaml @@ -45,6 +45,7 @@ jobs: iamcredentials.googleapis.com:443 oauth2.googleapis.com:443 objects.githubusercontent.com:443 + release-assets.githubusercontent.com:443 pypi.org:443 raw.githubusercontent.com:443 rekor.sigstore.dev:443