diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 9764776ee97..e29160fdcd3 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -28,10 +28,11 @@ jobs:
           egress-policy: block
           allowed-endpoints: >
             api.adoptium.net:443
-            *.github.com:443
+            api.github.com:443
             github.com:443
             objects.githubusercontent.com:443
             repo.maven.apache.org:443
+            uploads.github.com:443
       - name: Check out code and set up JDK and Maven
         uses: s4u/setup-maven-action@489441643219d2b93ee2a127b2402eb640a1b947 # v1.13.0
         with:
diff --git a/.github/workflows/run-integration-tests.yml b/.github/workflows/run-integration-tests.yml
index 7840e95c49d..fb98b3d0e46 100644
--- a/.github/workflows/run-integration-tests.yml
+++ b/.github/workflows/run-integration-tests.yml
@@ -27,9 +27,11 @@ jobs:
             api.adoptium.net:443
             checkstyle.org:443
             github.com:443
-            *.githubusercontent.com:443
+            objects.githubusercontent.com:443
+            oss.sonatype.org:443
+            raw.githubusercontent.com:443
             repo.maven.apache.org:443
-            *.sonatype.org:443
+            repository.sonatype.org:443
       - name: Check out code and set up JDK and Maven
         uses: s4u/setup-maven-action@489441643219d2b93ee2a127b2402eb640a1b947 # v1.13.0
         with: