3 ms·
> I used to rely on Github IP whitelist but one day i realized anyone can hit my Jenkins use Github. That's a really good point but I guess you are talking abo
by darkwater 7y ago
> I used to rely on Github IP whitelist but one day i realized anyone can hit my Jenkins use Github.
That's a really good point but I guess you are talking about Actions egress right? Webhook in theory have dedicated IP ranges [1] and I think they are not shared with Actions egress, although TBH I haven't tested it.
[1] https://api.github.com/meta https://api.github.com/meta