diff --git a/.github/workflows/bot-deploy.yml b/.github/workflows/bot-deploy.yml
index 9c5f482..a85c3cb 100644
--- a/.github/workflows/bot-deploy.yml
+++ b/.github/workflows/bot-deploy.yml
@@ -24,3 +24,4 @@ jobs:
       aws-role: arn:aws:iam::841162699174:role/erfiume-oidc-write
       egress-policy-allowlist: >
         ziglang.org:443
+        objects.githubusercontent.com:443
diff --git a/.github/workflows/fetcher-deploy.yml b/.github/workflows/fetcher-deploy.yml
index 2e3177b..c0b517a 100644
--- a/.github/workflows/fetcher-deploy.yml
+++ b/.github/workflows/fetcher-deploy.yml
@@ -24,3 +24,4 @@ jobs:
       aws-role: arn:aws:iam::841162699174:role/erfiume-oidc-write
       egress-policy-allowlist: >
         ziglang.org:443
+        objects.githubusercontent.com:443