From bf9884151025c2d48b36277232352f3e74e9a28d Mon Sep 17 00:00:00 2001
From: Mike Fiedler <miketheman@gmail.com>
Date: Fri, 12 Jun 2026 09:13:55 -0400
Subject: [PATCH] chore(ci): try network egress firewall

Signed-off-by: Mike Fiedler <miketheman@gmail.com>
---
 .github/workflows/codspeed.yml | 2 +-
 .github/workflows/publish.yml  | 4 ++--
 .github/workflows/python.yml   | 2 +-
 .github/workflows/zizmor.yml   | 2 +-
 4 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/codspeed.yml b/.github/workflows/codspeed.yml
index bff594d..a936fec 100644
--- a/.github/workflows/codspeed.yml
+++ b/.github/workflows/codspeed.yml
@@ -19,7 +19,7 @@ permissions:
 jobs:
   codspeed:
     name: Run benchmarks
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04-firewall
     steps:
     - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       with:
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 126be3b..49b5e2b 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -18,7 +18,7 @@ permissions: {}
 jobs:
   build:
     name: Build distribution 📦
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04-firewall
     permissions:
       contents: read
     steps:
@@ -40,7 +40,7 @@ jobs:
   publish-to-pypi:
     name: Publish 📦 to PyPI
     needs: build
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04-firewall
     environment:
       name: pypi
       url: https://pypi.org/project/pytest-socket/${{ github.event.release.tag_name }}
diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml
index 8515470..ee21090 100644
--- a/.github/workflows/python.yml
+++ b/.github/workflows/python.yml
@@ -23,7 +23,7 @@ jobs:
       matrix:
         os:
           - macos-latest
-          - ubuntu-latest
+          - ubuntu-24.04-firewall
           - windows-latest
         python-version: ["3.10", "3.11", "3.12", "3.13", "3.14", "3.13t", "3.14t"]
 
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 2b4b213..4e94010 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -15,7 +15,7 @@ permissions: {}
 jobs:
   zizmor:
     name: Run zizmor 🌈
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04-firewall
     permissions:
       security-events: write # Required for upload-sarif (used by zizmor-action) to upload SARIF files.
       contents: read         # Only needed for private repos. Needed to clone the repo.