GitHub uses 8,350 prefixes for actions.
Short answer
actions lists the addresses GitHub-hosted Actions runners can use. It is long and changes often; GitHub notes it is not a reliable allowlist on its own.
Prefixes
What changed
- 31 Oct 2026
+ 130.107.0.0/22 + 130.107.128.0/17 + 130.107.16.0/20 + 130.107.32.0/19 + 130.107.4.0/23 + 130.107.6.0/24 + 130.107.64.0/18 + 130.107.7.0/27 + 130.107.7.128/25 + 130.107.7.32/29 + 130.107.7.64/26 + 130.107.8.0/21 + 132.220.0.0/18 + 132.220.128.0/17 + 132.220.64.0/20 + 132.220.80.0/22 + 132.220.84.0/24 + 132.220.85.0/25 + 132.220.85.128/28 + 132.220.85.144/29 + 132.220.85.152/30 + 132.220.85.158/31 + 132.220.85.160/27 + 132.220.85.192/26 + 132.220.86.0/24 + 132.220.87.0/27 + 132.220.87.112/31 + 132.220.87.114/32 + 132.220.87.127/32 + 132.220.87.128/28 + 132.220.87.160/27 + 132.220.87.192/26 + 132.220.87.32/28 + 132.220.87.48/29 + 132.220.87.56/30 + 132.220.87.64/27 + 132.220.87.96/28 + 132.220.88.0/21 + 132.220.96.0/19 + 134.149.0.0/21 + 134.149.10.0/27 + 134.149.10.128/26 + 134.149.10.192/27 + 134.149.10.240/28 + 134.149.10.32/28 + 134.149.10.48/30 + 134.149.10.52/32 + 134.149.10.55/32 + 134.149.10.64/26 + 134.149.11.0/24 + 134.149.12.0/24 + 134.149.13.0/25 + 134.149.13.128/26 + 134.149.13.196/31 + 134.149.13.208/28 + 134.149.13.224/27 + 134.149.14.0/27 + 134.149.14.128/25 + 134.149.14.50/31 + 134.149.14.52/30
Allowlist formats
nginx (first 5 prefixes)
allow 100.62.132.232/32; allow 100.62.139.158/32; allow 104.208.0.0/19; allow 104.208.128.0/17; allow 104.208.32.0/20; deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 100.62.132.232/32 -j ACCEPT iptables -A INPUT -s 100.62.139.158/32 -j ACCEPT iptables -A INPUT -s 104.208.0.0/19 -j ACCEPT iptables -A INPUT -s 104.208.128.0/17 -j ACCEPT iptables -A INPUT -s 104.208.32.0/20 -j ACCEPT
Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.
Sources
- GitHub: published IP ranges · checked 5 Nov 2026
- GitHub documentation