From 82a1cc602118a19d350e9fc186cccff824bc475c Mon Sep 17 00:00:00 2001
From: Nicolas CARPi <nico-git@deltablot.email>
Date: Wed, 9 Oct 2024 10:24:20 +0200
Subject: [PATCH] add raw.githubusercontent.com to allow list of domains

because trivy vuln scanner uses it
---
 .github/workflows/build_hypernext.yaml   | 1 +
 .github/workflows/build_push_demo.yml    | 1 +
 .github/workflows/push_latest_image.yaml | 1 +
 .github/workflows/push_stable_image.yaml | 1 +
 4 files changed, 4 insertions(+)

diff --git a/.github/workflows/build_hypernext.yaml b/.github/workflows/build_hypernext.yaml
index 9f886c4..d5e60b5 100644
--- a/.github/workflows/build_hypernext.yaml
+++ b/.github/workflows/build_hypernext.yaml
@@ -32,6 +32,7 @@ jobs:
                   packagist.org
                   pkg-containers.githubusercontent.com
                   production.cloudflare.docker.com
+                  raw.githubusercontent.com
                   registry.yarnpkg.com
                   repo.yarnpkg.com
                   registry.npmjs.org
diff --git a/.github/workflows/build_push_demo.yml b/.github/workflows/build_push_demo.yml
index bd8cb3e..61597f4 100644
--- a/.github/workflows/build_push_demo.yml
+++ b/.github/workflows/build_push_demo.yml
@@ -28,6 +28,7 @@ jobs:
                   packagist.org
                   pkg-containers.githubusercontent.com
                   production.cloudflare.docker.com
+                  raw.githubusercontent.com
                   registry.yarnpkg.com
                   repo.yarnpkg.com
                   registry.npmjs.org
diff --git a/.github/workflows/push_latest_image.yaml b/.github/workflows/push_latest_image.yaml
index 7bf39ae..b4ffcd2 100644
--- a/.github/workflows/push_latest_image.yaml
+++ b/.github/workflows/push_latest_image.yaml
@@ -28,6 +28,7 @@ jobs:
                   packagist.org
                   pkg-containers.githubusercontent.com
                   production.cloudflare.docker.com
+                  raw.githubusercontent.com
                   registry.yarnpkg.com
                   repo.yarnpkg.com
                   registry.npmjs.org
diff --git a/.github/workflows/push_stable_image.yaml b/.github/workflows/push_stable_image.yaml
index 45dc37b..f781789 100644
--- a/.github/workflows/push_stable_image.yaml
+++ b/.github/workflows/push_stable_image.yaml
@@ -30,6 +30,7 @@ jobs:
                   packagist.org
                   pkg-containers.githubusercontent.com
                   production.cloudflare.docker.com
+                  raw.githubusercontent.com
                   registry.yarnpkg.com
                   repo.yarnpkg.com
                   registry.npmjs.org