Actions config: is "allowedDomains" supporting wildcards?

[JulianHandrup]

Hello there,

I was wondering if allowedDomains allows for example api.example.com if only example.com is listed, or - if that was not the case - if *.example.com would allow for anything ending on .example.com.

I assume it's blocking anything that's not an exact match, but maybe I'm wrong. 🤷‍♂️