diff --git a/.github/workflows/patch-models.yaml b/.github/workflows/patch-models.yaml
index a42f82a4..d0e5c83d 100644
--- a/.github/workflows/patch-models.yaml
+++ b/.github/workflows/patch-models.yaml
@@ -55,7 +55,7 @@ jobs:
               rekor.sigstore.dev:443
               storage.googleapis.com:443
               tuf-repo-cdn.sigstore.dev:443
-              deb.debian.org:80
+              *.ubuntu.com:80
               *.blob.core.windows.net:443
 
         - name: Set up Docker Buildx
diff --git a/.github/workflows/test-docker-args.yaml b/.github/workflows/test-docker-args.yaml
index 0921d5ea..67281569 100644
--- a/.github/workflows/test-docker-args.yaml
+++ b/.github/workflows/test-docker-args.yaml
@@ -58,7 +58,7 @@ jobs:
             storage.googleapis.com:443
             *.blob.core.windows.net:443
             *.azureedge.net:443
-            deb.debian.org:80
+            *.ubuntu.com:80
             developer.download.nvidia.com:443
             ghcr.io:443
 
diff --git a/.github/workflows/test-docker.yaml b/.github/workflows/test-docker.yaml
index aadb9edc..762ba68b 100644
--- a/.github/workflows/test-docker.yaml
+++ b/.github/workflows/test-docker.yaml
@@ -63,7 +63,6 @@ jobs:
             storage.googleapis.com:443
             *.blob.core.windows.net:443
             *.azureedge.net:443
-            deb.debian.org:80
             developer.download.nvidia.com:443
             dl-cdn.alpinelinux.org:443
             *.ubuntu.com:80
@@ -193,7 +192,7 @@ jobs:
             storage.googleapis.com:443
             *.blob.core.windows.net:443
             *.azureedge.net:443
-            deb.debian.org:80
+            *.ubuntu.com:80
             developer.download.nvidia.com:443
             dl-cdn.alpinelinux.org:443
             registry.ollama.ai:443
diff --git a/.github/workflows/test-helm.yaml b/.github/workflows/test-helm.yaml
index a41d7e9c..f90bae2c 100644
--- a/.github/workflows/test-helm.yaml
+++ b/.github/workflows/test-helm.yaml
@@ -49,7 +49,7 @@ jobs:
             proxy.golang.org:443
             registry-1.docker.io:443
             storage.googleapis.com:443
-            deb.debian.org:80
+            *.ubuntu.com:80
             developer.download.nvidia.com:443
             get.helm.sh:443
             *.blob.core.windows.net:443
diff --git a/.github/workflows/test-kubernetes.yaml b/.github/workflows/test-kubernetes.yaml
index 1f626f08..83f5c98b 100644
--- a/.github/workflows/test-kubernetes.yaml
+++ b/.github/workflows/test-kubernetes.yaml
@@ -49,7 +49,7 @@ jobs:
             proxy.golang.org:443
             registry-1.docker.io:443
             storage.googleapis.com:443
-            deb.debian.org:80
+            *.ubuntu.com:80
             developer.download.nvidia.com:443
             get.helm.sh:443
             *.blob.core.windows.net:443
diff --git a/.github/workflows/update-models.yaml b/.github/workflows/update-models.yaml
index c0b9cc88..0d5108f1 100644
--- a/.github/workflows/update-models.yaml
+++ b/.github/workflows/update-models.yaml
@@ -56,7 +56,7 @@ jobs:
             tuf-repo-cdn.sigstore.dev:443
             sertaccdnvs.azureedge.net:443
             developer.download.nvidia.com:443
-            deb.debian.org:80
+            *.ubuntu.com:80
 
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7