From bda51b25bfc76c2db3326f9cd97780f4bb57d2d2 Mon Sep 17 00:00:00 2001
From: Volodymyr Kolesnykov <volodymyr@wildwolf.name>
Date: Sun, 8 Nov 2026 03:01:33 +0200
Subject: [PATCH] ci: allow Node.js download hosts in Sonar workflow

Include nodejs.org and GitHub release assets in the Sonar workflow allow list to match the Node.js download endpoints used by CI.
---
 .github/workflows/sonarcloud.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml
index 4e4d8af..c022d4a 100644
--- a/.github/workflows/sonarcloud.yml
+++ b/.github/workflows/sonarcloud.yml
@@ -36,8 +36,10 @@ jobs:
             ingest.codecov.io:443
             keybase.io:443
             motd.ubuntu.com:443
+            nodejs.org:443
             o26192.ingest.us.sentry.io:443
             packages.microsoft.com:443
+            release-assets.githubusercontent.com:443
             scanner.sonarcloud.io:443
             sonarcloud.io:443
             storage.googleapis.com:443