From 7445f7ed735cb41a71a3c3557cd2c101ea23f207 Mon Sep 17 00:00:00 2001
From: dudinea <eugene.doudine@octopus.com>
Date: Tue, 14 Apr 2026 07:54:10 +0300
Subject: [PATCH] ci: harden-runner: whitelist get.helm.sh  and
 registry.npmjs.org for renovate workflow (#27163) (#27328)

Signed-off-by: Eugene Doudine <eugene.doudine@octopus.com>
---
 .github/workflows/renovate.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
index 80198cdcd7..041f3e47b4 100644
--- a/.github/workflows/renovate.yaml
+++ b/.github/workflows/renovate.yaml
@@ -33,6 +33,8 @@ jobs:
             proxy.golang.org:443
             nodejs.org:443
             pypi.org:443
+            get.helm.sh
+            registry.npmjs.org
 
       - name: Get token
         id: get_token