fix: add api.deps.dev to allowlist for scorecard.yml (#225) #726

	name: Ruby Unit CI
	on:
	pull_request:
	branches:
	- main
	push:
	branches:
	- main
	workflow_dispatch:
	permissions:
	contents: read

	jobs:
	unit-test:
	if: ${{ github.repository == 'GoogleCloudPlatform/functions-framework-ruby' }}
	strategy:
	matrix:
	os: [ubuntu-latest]
	ruby: ['3.1', '3.2', '3.3', '3.4']
	flags: ["--only --test-unit"]
	include:
	- os: ubuntu-latest
	ruby: jruby
	flags: "--only --test-unit"
	- os: ubuntu-latest
	ruby: truffleruby
	flags: "--only --test-unit"
	- os: macos-latest
	ruby: "3.1"
	flags: "--only --test-unit"
	- os: windows-latest
	ruby: "3.2" # 3.1 fails similar to https://github.com/rubygems/rubygems/issues/4338
	flags: "--only --test-unit"
	- os: ubuntu-latest
	ruby: "3.1"
	flags: "--only --test-yardoc --test-build --test-examples"
	fail-fast: false
	runs-on: ${{ matrix.os }}
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
	with:
	disable-sudo: true
	egress-policy: block
	allowed-endpoints: >
	github.com:443
	index.rubygems.org:443
	objects.githubusercontent.com:443
	release-assets.githubusercontent.com:443
	rubygems.org:443

	- name: Checkout repo
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	- name: Install Ruby ${{ matrix.ruby }}
	uses: ruby/setup-ruby@472790540115ce5bd69d399a020189a8c87d641f # v1.247.0
	with:
	ruby-version: "${{ matrix.ruby }}"
	bundler-cache: true
	- name: Install toys
	run: gem install --no-document toys
	- name: Test ${{ matrix.flags }}
	shell: bash
	env:
	MT_COMPAT: "true"
	run: toys ci ${{ matrix.flags }}

Provide feedback