Skip to content

Add information to GitHub Connections for allow lists#3094

Merged
stevencl840 merged 7 commits intomainfrom
sjc/update-githubconnection-allowlist
Apr 14, 2026
Merged

Add information to GitHub Connections for allow lists#3094
stevencl840 merged 7 commits intomainfrom
sjc/update-githubconnection-allowlist

Conversation

@stevencl840
Copy link
Copy Markdown
Contributor

@stevencl840 stevencl840 commented Apr 13, 2026

Context 🌇

We have updated the GitHub App so that all traffic from the App to GitHub now passes through a known IP. This allows customers using GitHub Enterprise to enable allow lists and, by adding this IP, still use the GitHub App to manage connections to their repositories.

chrome_5NfT9Nqo0H

This PR will closes devex-5

@stevencl840 stevencl840 force-pushed the sjc/update-githubconnection-allowlist branch 2 times, most recently from af27aac to 4a35536 Compare April 14, 2026 02:50

## Allow List

The Octopus Deploy GitHub App can be used with the GitHub Enterprise allow list feature. To include the app in your allow list manually add the IP Address `172.182.208.68`. Due to a limitation in the way that GitHub supports inheritance of IP addresses when performing actions on behalf of a user, the IP address for the GitHub App needs to be configured manually and cannot be inherited from the app settings. For more information please refer to [GitHub's Documentation](https://docs.github.com/en/enterprise-cloud@latest/apps/maintaining-github-apps/managing-allowed-ip-addresses-for-a-github-app#about-ip-address-allow-lists-for-github-apps)
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think I would probably put the bit about the limitation in a separate paragraph, and maybe as some sort of information note like the one below? Just to differentiate it from the main content which is the IP address.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Having two information blocks in that close of proximity made it look weird (in my opinion). I have split it into two paragraphs and placed the info block between them. I think breaking it up actually draws more attention to the second paragraph


## Allow List

The Octopus Deploy GitHub App can be used with the GitHub Enterprise allow list feature. To include the app in your allow list manually add the IP Address `172.182.208.68`. Due to a limitation in the way that GitHub supports inheritance of IP addresses when performing actions on behalf of a user, the IP address for the GitHub App needs to be configured manually and cannot be inherited from the app settings. For more information please refer to [GitHub's Documentation](https://docs.github.com/en/enterprise-cloud@latest/apps/maintaining-github-apps/managing-allowed-ip-addresses-for-a-github-app#about-ip-address-allow-lists-for-github-apps)
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A few other thoughts:

  • Can we add a link to the GitHub docs on how to add the IP address to an enterprise or org?
  • Is "GitHub Enterprise allow list" the name of the feature in GitHub? Might be worth checking what they call it and adjusting if needed.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • I have added the link to githubs documentation
  • They refer to it as allow list, or allow list IP. I have removed the reference to enterprise

@stevencl840 stevencl840 force-pushed the sjc/update-githubconnection-allowlist branch from f86c71b to ae06a97 Compare April 14, 2026 22:08
@stevencl840 stevencl840 marked this pull request as ready for review April 14, 2026 22:08
@stevencl840 stevencl840 merged commit 3be6cdc into main Apr 14, 2026
5 checks passed
@stevencl840 stevencl840 deleted the sjc/update-githubconnection-allowlist branch April 14, 2026 22:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants