diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index b200c4ca..6908e3ad 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -48,6 +48,7 @@ jobs:
             github.com:443
             objects.githubusercontent.com:443
             oss-fuzz-build-logs.storage.googleapis.com:443
+            tuf-repo-cdn.sigstore.dev:443
             www.bestpractices.dev:443
 
       - name: Checkout code