diff --git a/.github/workflows/pre-release.yaml b/.github/workflows/pre-release.yaml
index 3cc09284..f517f641 100644
--- a/.github/workflows/pre-release.yaml
+++ b/.github/workflows/pre-release.yaml
@@ -33,6 +33,7 @@ jobs:
             rekor.sigstore.dev:443
             storage.googleapis.com:443
             tuf-repo-cdn.sigstore.dev:443
+            sum.golang.org:443
 
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
         with:
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index 0cb454f9..dcc7d4d0 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -48,6 +48,7 @@ jobs:
             tuf-repo-cdn.sigstore.dev:443
             www.bestpractices.dev:443
             api.scorecard.dev:443
+            api.deps.dev:443
 
       - name: "Checkout code"
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
diff --git a/.github/workflows/update-models.yaml b/.github/workflows/update-models.yaml
index 3910ff86..4d1e0aac 100644
--- a/.github/workflows/update-models.yaml
+++ b/.github/workflows/update-models.yaml
@@ -58,6 +58,7 @@ jobs:
             sertaccdnvs.azureedge.net:443
             developer.download.nvidia.com:443
             *.ubuntu.com:80
+            pypi.org:443
 
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7