# Using Codecov with GitHub IP allow list

**URL:** <https://community.codecov.com/t/using-codecov-with-github-ip-allow-list/2293>\
**Category:** Uncategorized\
**Created:** [November 10, 2020, 11:12am UTC](https://community.codecov.com/t/using-codecov-with-github-ip-allow-list/2293 "2020-11-10T11:12:50Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![bsheen](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.codecov.com/bsheen/32/1285_2.png) [@bsheen](https://community.codecov.com/u/bsheen)\
**Post date:** [November 10, 2020, 11:12am UTC](https://community.codecov.com/t/using-codecov-with-github-ip-allow-list/2293/1 "2020-11-10T11:12:50Z")

</div>

Hi. we use GitHub IP allow list

> IP allow list  
> An IP allow list lets your organization limit access based on the IP address a person is accessing from.

More information here:

> **[Managing allowed IP addresses for your organization - GitHub Enterprise Cloud...](https://docs.github.com/en/enterprise-cloud@latest/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-allowed-ip-addresses-for-your-organization)**
>
> You can restrict access to your organization's private assets by configuring a list of IP addresses that are allowed to connect.

When `Enable IP allow list` is checked.

> Enabling will allow you to restrict access by IP address to resources owned by this organization.

We get this error on Codecov:

> # Unauthorized
> 
> Github API: Forbidden.  
> Check on [Codecov’s status](http://status.codecov.io/) or see [our docs](https://docs.codecov.io/) for common support.  
> **Error 403**

When trying to access the Github repos settings on Codecov (note: unchecking `Enable IP allow list` and saving on Github restores access to repos settings on Codecov ).

Is there a set of Codecov IP addresses that we could add to the IP allow list?

---

<div class="post-metadata">

**Author:** ![tom](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.codecov.com/tom/32/8_2.png) [@tom](https://community.codecov.com/u/tom)\
**Post date:** [November 23, 2020, 12:41am UTC](https://community.codecov.com/t/using-codecov-with-github-ip-allow-list/2293/2 "2020-11-23T00:41:30Z")

</div>

Hi @bsheen, thanks for this. Unfortunately, we do not have a set of IP addresses that can be currently used for this purpose. I have, however, let the product team know, and I’ll update this thread if that changes.

---

<div class="post-metadata">

**Author:** ![bsheen](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.codecov.com/bsheen/32/1285_2.png) [@bsheen](https://community.codecov.com/u/bsheen)\
**Post date:** [November 23, 2020, 1:12am UTC](https://community.codecov.com/t/using-codecov-with-github-ip-allow-list/2293/3 "2020-11-23T01:12:44Z")

</div>

Ok, thanks for letting me know.

---

<div class="post-metadata">

**Author:** ![tom](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.codecov.com/tom/32/8_2.png) [@tom](https://community.codecov.com/u/tom)\
**Post date:** [December 8, 2020, 4:28am UTC](https://community.codecov.com/t/using-codecov-with-github-ip-allow-list/2293/5 "2020-12-08T04:28:09Z")

</div>

Hi @bsheen, just a quick question, is this a restriction that is placed on every service that touches your repos?

---

<div class="post-metadata">

**Author:** ![bsheen](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.codecov.com/bsheen/32/1285_2.png) [@bsheen](https://community.codecov.com/u/bsheen)\
**Post date:** [December 8, 2020, 8:30pm UTC](https://community.codecov.com/t/using-codecov-with-github-ip-allow-list/2293/6 "2020-12-08T20:30:04Z")

</div>

Yes. IP address(es) for a service are not on the IP allow list then Github returns the following error:

 ![Screen Shot 2020-12-09 at 06.24.42](https://canada1.discourse-cdn.com/flex029/uploads/codecov/original/2X/9/94d7db3b948473fa7f1792bbddafad6f1ec47f13.png)

---

<div class="post-metadata">

**Author:** ![tom](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.codecov.com/tom/32/8_2.png) [@tom](https://community.codecov.com/u/tom)\
**Post date:** [December 8, 2020, 11:52pm UTC](https://community.codecov.com/t/using-codecov-with-github-ip-allow-list/2293/7 "2020-12-08T23:52:27Z")

</div>

@bsheen, thanks! We’ll take a look to see what we can do here.

---

<div class="post-metadata">

**Author:** ![tbennun](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.codecov.com/tbennun/32/2403_2.png) [@tbennun](https://community.codecov.com/u/tbennun)\
**Post date:** [April 27, 2022, 7:47am UTC](https://community.codecov.com/t/using-codecov-with-github-ip-allow-list/2293/9 "2022-04-27T07:47:23Z")

</div>

Are there any news about this topic? It would be great if there is anything we could use. We have a lot of variability in coverage and slowdown in our CI due to it trying to communicate with codecov (and failing) 5 times in a row.

---

<div class="post-metadata">

**Author:** ![tom](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.codecov.com/tom/32/8_2.png) [@tom](https://community.codecov.com/u/tom)\
**Post date:** [May 2, 2022, 11:53pm UTC](https://community.codecov.com/t/using-codecov-with-github-ip-allow-list/2293/10 "2022-05-02T23:53:41Z")

</div>

@tbennun do you mind opening a new topic on this? I’m not convinced that this topic is related to what you are seeing. I’d like to try to diagnose first.

---

<div class="post-metadata">

**Author:** ![matt-olds](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.codecov.com/matt-olds/32/2443_2.png) [@matt-olds](https://community.codecov.com/u/matt-olds)\
**Post date:** [May 18, 2022, 12:47am UTC](https://community.codecov.com/t/using-codecov-with-github-ip-allow-list/2293/11 "2022-05-18T00:47:03Z")

</div>

Is there any progress on this request? GitHub allows installed apps to configure and provide their own list of IPs for use by all customers that have the app installed (CodeCov) and would like to enforce the restriction.

 ![image](https://canada1.discourse-cdn.com/flex029/uploads/codecov/original/2X/d/db2f949b63709ef116e73f151734c7e42d906c7e.jpeg)

---

<div class="post-metadata">

**Author:** ![tom](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.codecov.com/tom/32/8_2.png) [@tom](https://community.codecov.com/u/tom)\
**Post date:** [May 24, 2022, 5:48pm UTC](https://community.codecov.com/t/using-codecov-with-github-ip-allow-list/2293/12 "2022-05-24T17:48:25Z")

</div>

@matt-olds no, unfortunately, we aren’t able to provide this yet. I’ll let the product team know.

---

<div class="post-metadata">

**Author:** ![karsky](https://avatars.discourse-cdn.com/v4/letter/k/958977/32.png) [@karsky](https://community.codecov.com/u/karsky)\
**Post date:** [February 14, 2023, 10:30am UTC](https://community.codecov.com/t/using-codecov-with-github-ip-allow-list/2293/13 "2023-02-14T10:30:39Z")

</div>

Hey @tom, has the team made any progress on the Github IP allow list for installed apps?

---

<div class="post-metadata">

**Author:** ![tom](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.codecov.com/tom/32/8_2.png) [@tom](https://community.codecov.com/u/tom)\
**Post date:** [February 14, 2023, 6:05pm UTC](https://community.codecov.com/t/using-codecov-with-github-ip-allow-list/2293/14 "2023-02-14T18:05:03Z")

</div>

Hi @karsky, to be honest, there hasn’t been enough feedback to prioritize this as an issue. I would strongly recommend posting [here](https://codecov.canny.io/customer-requests/p/github-ip-whitelist-github-apps) to get traction.

---

<div class="post-metadata">

**Author:** ![tonywildey-valstro](https://yyz1.discourse-cdn.com/flex029/user_avatar/community.codecov.com/tonywildey-valstro/32/2899_2.png) [@tonywildey-valstro](https://community.codecov.com/u/tonywildey-valstro)\
**Post date:** [February 15, 2023, 7:03pm UTC](https://community.codecov.com/t/using-codecov-with-github-ip-allow-list/2293/15 "2023-02-15T19:03:37Z")

</div>

We are in the same boat here
