Using Codecov with GitHub IP allow list

1

Hi. we use GitHub IP allow list

IP allow list
An IP allow list lets your organization limit access based on the IP address a person is accessing from.

More information here:

When Enable IP allow list is checked.

Enabling will allow you to restrict access by IP address to resources owned by this organization.

We get this error on Codecov:

Unauthorized

Github API: Forbidden.
Check on Codecov’s status or see our docs for common support.
Error 403

When trying to access the Github repos settings on Codecov (note: unchecking Enable IP allow list and saving on Github restores access to repos settings on Codecov ).

Is there a set of Codecov IP addresses that we could add to the IP allow list?

2

Hi @bsheen, thanks for this. Unfortunately, we do not have a set of IP addresses that can be currently used for this purpose. I have, however, let the product team know, and I’ll update this thread if that changes.

3

Ok, thanks for letting me know.

5

Hi @bsheen, just a quick question, is this a restriction that is placed on every service that touches your repos?

6

Yes. IP address(es) for a service are not on the IP allow list then Github returns the following error:

Screen Shot 2020-12-09 at 06.24.42
Screen Shot 2020-12-09 at 06.24.422071×911 77.9 KB

7

@bsheen, thanks! We’ll take a look to see what we can do here.

9

Are there any news about this topic? It would be great if there is anything we could use. We have a lot of variability in coverage and slowdown in our CI due to it trying to communicate with codecov (and failing) 5 times in a row.

10

@tbennun do you mind opening a new topic on this? I’m not convinced that this topic is related to what you are seeing. I’d like to try to diagnose first.

11

Is there any progress on this request? GitHub allows installed apps to configure and provide their own list of IPs for use by all customers that have the app installed (CodeCov) and would like to enforce the restriction.

image
image1852×236 45.4 KB

12

@matt-olds no, unfortunately, we aren’t able to provide this yet. I’ll let the product team know.

13

Hey @tom, has the team made any progress on the Github IP allow list for installed apps?

1 Like
14

Hi @karsky, to be honest, there hasn’t been enough feedback to prioritize this as an issue. I would strongly recommend posting here to get traction.

1 Like
15

We are in the same boat here