Jordan Harband c4d9239cbb [actions] allow DockerHub's CloudFront CDN so image pulls aren't blocked ...

harden-runner runs with `egress-policy: block`, and the allow-list only included
`production.cloudflare.docker.com`. DockerHub serves image blobs from either its
Cloudflare or its CloudFront CDN; when a pull was routed to CloudFront
(`production.cloudfront.docker.com`) the connection was dropped, causing
`error pulling image configuration: ... connect: connection refused` and exit
125 in the xenial, installation_node, and fast (httpbin) suites. Allow both CDNs.

2026-06-03 13:29:38 -07:00

4.1 KiB

Raw Blame History

View Raw