diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index e6ee3aa..426fa27 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -50,6 +50,7 @@ jobs:
           allowed-endpoints: >
             api.github.com:443
             github.com:443
+            objects.githubusercontent.com:443
             registry.npmjs.org:443
             storage.googleapis.com:443
             tuf-repo-cdn.sigstore.dev:443