diff --git a/.github/workflows/source-provenance.yml b/.github/workflows/source-provenance.yml
index f51c1d29..89f1c363 100644
--- a/.github/workflows/source-provenance.yml
+++ b/.github/workflows/source-provenance.yml
@@ -27,6 +27,7 @@ jobs:
           allowed-endpoints: >+
             github.com:443
             api.github.com:443
+            release-assets.githubusercontent.com:443
             uploads.github.com:443
             fulcio.sigstore.dev:443
             rekor.sigstore.dev:443