chore(ci): try network egress firewall

Signed-off-by: Mike Fiedler <miketheman@gmail.com>

Author: miketheman

.github/workflows/codspeed.yml

@@ -19,7 +19,7 @@ permissions:
 jobs:
   codspeed:
     name: Run benchmarks
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04-firewall
     steps:
     - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       with:

.github/workflows/publish.yml

@@ -18,7 +18,7 @@ permissions: {}
 jobs:
   build:
     name: Build distribution 📦
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04-firewall
     permissions:
       contents: read
     steps:
@@ -40,7 +40,7 @@ jobs:
   publish-to-pypi:
     name: Publish 📦 to PyPI
     needs: build
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04-firewall
     environment:
       name: pypi
       url: https://pypi.org/project/pytest-socket/${{ github.event.release.tag_name }}

.github/workflows/python.yml

@@ -23,7 +23,7 @@ jobs:
       matrix:
         os:
           - macos-latest
-          - ubuntu-latest
+          - ubuntu-24.04-firewall
           - windows-latest
         python-version: ["3.10", "3.11", "3.12", "3.13", "3.14", "3.13t", "3.14t"]
 

.github/workflows/zizmor.yml

@@ -15,7 +15,7 @@ permissions: {}
 jobs:
   zizmor:
     name: Run zizmor 🌈
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04-firewall
     permissions:
       security-events: write # Required for upload-sarif (used by zizmor-action) to upload SARIF files.
       contents: read         # Only needed for private repos. Needed to clone the repo.