Tweak HubSpot regex to match optional regional hosts, plus upgrade si…

…gstore
4ARMED · Oct 7, 2023 · 28ccf1b · 28ccf1b
1 parent fca76f6
commit 28ccf1b
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 3 deletions.
diff --git a/.github/workflows/pypi.yaml b/.github/workflows/pypi.yaml
@@ -5,6 +5,7 @@ on: push
 jobs:
   tests:
     uses: ./.github/workflows/tests.yaml
+
   build:
     name: Build distribution
     needs: [tests]
@@ -70,7 +71,7 @@ jobs:
         name: python-package-distributions
         path: dist/
     - name: Sign the dists with Sigstore
-      uses: sigstore/gh-action-sigstore-python@v1.2.3
+      uses: sigstore/gh-action-sigstore-python@v2.1.0
       with:
         inputs: >-
           ./dist/*.tar.gz

diff --git a/sricheck/__init__.py b/sricheck/__init__.py
@@ -1 +1 @@
-__version__ = "1.7.1"
+__version__ = "1.7.2"
diff --git a/sricheck/sricheck.py b/sricheck/sricheck.py
@@ -43,7 +43,7 @@ def __init__(self, url):
         self.allowlisted_hosts = [
             "fonts\.googleapis\.com", # does not use versioning so can't realistically use SRI
             "fonts\.gstatic\.com", # does not use versioning so can't realistically use SRI
-            "js\.hs-scripts\.com", # does not use versioning so can't realistically use SRI
+            "js-?[a-z0-9]*\.hs-scripts\.com", # does not use versioning so can't realistically use SRI
             "www\.googletagmanager\.com", # does not use versioning so can't realistically use SRI
         ]