github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-21 06:45:29 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 1

ci: allow endpoints used in tests

Browse source 
Relevant lines from build_and_test[1]:

    endpoint called ip address:port 1.1.1.1:1025, domain:
    endpoint called ip address:port 54.185.253.63:43, domain: whois.pir.org.
    ##[error]StepSecurity Harden Runner: DNS resolution for domain dns.quad9.net. was blocked. This domain is not in the list of allowed-endpoints.
    ##[error]StepSecurity Harden Runner: DNS resolution for domain whois.pir.org. was blocked. This domain is not in the list of allowed-endpoints.

The relevant tests were added in the following commits:

* ef4409e7b ("added whois and dig profiles", 2018-08-30)
* 171898233 ("more profile fixes/testing", 2023-01-19)

Relates to #5439 #5485.

[1] https://github.com/netblue30/firejail/actions/runs/4854586882/jobs/8652141329
This commit is contained in:
Kelvin M. Klann 2023-04-24 03:27:50 -03:00
parent 6d0ffc75d8
commit a2c8a5f03c
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
.github/workflows/build.yml vendored
View file

@ -52,11 +52,14 @@ jobs:
with: with:
egress-policy: block egress-policy: block
allowed-endpoints: > allowed-endpoints: >
1.1.1.1:1025
azure.archive.ubuntu.com:80 azure.archive.ubuntu.com:80
debian.org:80 debian.org:80
dns.quad9.net:53
github.com:443 github.com:443
packages.microsoft.com:443 packages.microsoft.com:443
ppa.launchpadcontent.net:443 ppa.launchpadcontent.net:443
whois.pir.org:43
www.debian.org:443 www.debian.org:443
www.debian.org:80 www.debian.org:80
yahoo.com:1025 yahoo.com:1025