From 5c176324db034584b217e08d421734ed38c279e1 Mon Sep 17 00:00:00 2001 From: Ryan Lewis Date: Tue, 25 Aug 2026 05:02:30 +0100 Subject: [PATCH] fix(release): narrow S3 egress wildcards to Apple notary bucket The *.s3.amazonaws.com and *.s3.us-west-2.amazonaws.com wildcards matched any S3 bucket, leaving a general-purpose outbound write path open in the one job that holds the signing P12 and tap token. The harden-runner log from the successful v0.5.3 run (32801379092) shows the only S3 host actually contacted is notary-submissions-prod.s3.us-west-2.amazonaws.com (quill's upload to Apple's notary service); nothing ever matched the global wildcard. Replace both with that specific hostname. --- .github/workflows/release.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 899eadb..453fe48 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -35,6 +35,7 @@ jobs: github.com:443 go.dev:443 goreleaser.com:443 + notary-submissions-prod.s3.us-west-2.amazonaws.com:443 objects.githubusercontent.com:443 proxy.golang.org:443 raw.githubusercontent.com:443 @@ -47,8 +48,6 @@ jobs: tuf-repo-cdn.sigstore.dev:443 uploads.github.com:443 *.actions.githubusercontent.com:443 - *.s3.amazonaws.com:443 - *.s3.us-west-2.amazonaws.com:443 - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: