Developers and operators who restrict incoming GitHub webhooks with a static IP allowlist need to add three CIDR ranges: 9.234.98.160/28, 9.234.98.176/28 and 9.234.106.48/28. Keep the existing webhook ranges and add these alongside them to avoid rejecting deliveries from the new addresses. The change applies to webhook deliveries on github.com across all plans, including GitHub Enterprise Cloud.
The new ranges are already included in the hooks field of GitHub’s Meta API, which provides the current delivery IP ranges. If your allowlist is already kept up to date using that API, no additional changes are needed for these additions.
Choose a sign-in method or comment as a guest below.