Minor CI fixup

.github/workflows/continuous-integration-workflow.yml

@@ -119,11 +119,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
+        # Security hardening because this is a sensitive job,
+        # where extra care should be taken NOT to leak any secret
         uses: step-security/harden-runner@v2
         with:
           egress-policy: block
           allowed-endpoints:
             github.com:443
+            api.github.com:443
             *.githubusercontent.com:443
             pypi.org:443
             files.pythonhosted.org:443
@@ -172,6 +175,8 @@ jobs:
       id-token: write
     steps:
       - name: Harden Runner
+        # Security hardening because this is a sensitive job,
+        # where extra care should be taken NOT to leak any secret
         uses: step-security/harden-runner@v2
         with:
           egress-policy: block

README.md

@@ -5,7 +5,7 @@
 [![build status](https://github.com/py-pdf/fpdf2/workflows/build/badge.svg)](https://github.com/py-pdf/fpdf2/actions?query=branch%3Amaster)
 [![codecov](https://codecov.io/gh/py-pdf/fpdf2/branch/master/graph/badge.svg)](https://codecov.io/gh/py-pdf/fpdf2)
 [![Pypi Trusted Publisher: enabled](https://img.shields.io/badge/Pypi%20Trusted%20Publisher-enabled-green.svg)](https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers/)
-[![checks: bandit, guarddog, pylint, semgrep](https://img.shields.io/badge/checks-bandit,pylint,semgrep,grype-green.svg)](https://github.com/py-pdf/fpdf2/actions/workflows/continuous-integration-workflow.yml)
+[![checks: bandit, grype, guarddog, pylint, semgrep](https://img.shields.io/badge/checks-bandit,grype,guarddog,pylint,semgrep-green.svg)](https://github.com/py-pdf/fpdf2/actions/workflows/continuous-integration-workflow.yml)
 
 [![Dependents](https://img.shields.io/librariesio/dependents/pypi/fpdf2)](https://libraries.io/pypi/fpdf2/dependents)
 [![Downloads per month](https://pepy.tech/badge/fpdf2/month)](https://pepy.tech/project/fpdf2)