diff --git a/.github/workflows/trivy-vuln.yml b/.github/workflows/trivy-vuln.yml
index 90e263c..9213d3a 100644
--- a/.github/workflows/trivy-vuln.yml
+++ b/.github/workflows/trivy-vuln.yml
@@ -37,6 +37,7 @@ jobs:
           egress-policy: block
           allowed-endpoints: >
             api.github.com:443
+            ghcr.io:443
             github.com:443
             objects.githubusercontent.com:443