Updated Windows / Linux / RHEL workflow

.github/workflows/images_build_windows.yml

@@ -454,8 +454,25 @@ jobs:
         uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
         with:
           disable-sudo: true
-          egress-policy: audit
+          egress-policy: block
           disable-telemetry: true
+          allowed-endpoints: >
+            api.github.com:443
+            auth.docker.io:443
+            dc.services.visualstudio.com:443
+            fulcio.sigstore.dev:443
+            github.com:443
+            index.docker.io:443
+            mcr.microsoft.com:443
+            mobile.events.data.microsoft.com:443
+            ocsp.sectigo.com:80
+            production.cloudflare.docker.com:443
+            r12.c.lencr.org:80
+            registry-1.docker.io:443
+            rekor.sigstore.dev:443
+            timestamp.sigstore.dev:443
+            tuf-repo-cdn.sigstore.dev:443
+            x1.c.lencr.org:80
 
       - name: Checkout repository
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1