diff --git a/.github/workflows/node-workflow.yml b/.github/workflows/node-workflow.yml
index a0a56c46..1e9ccc6b 100644
--- a/.github/workflows/node-workflow.yml
+++ b/.github/workflows/node-workflow.yml
@@ -28,6 +28,16 @@ jobs:
       - name: Harden Runner
         if: runner.os == 'Linux'
         uses: step-security/harden-runner@main
+        with:
+          allowed-endpoints:
+            beta.api.stepsecurity.io.:443
+            codecov.io.:443
+            github.com.:443
+            nodejs.org.:443
+            raw.githubusercontent.com.:443
+            registry.npmjs.org.:443
+            setup-php.com.:443
+            storage.googleapis.com.:443
 
       - name: Checkout
         uses: actions/checkout@v2