Skip to main content

Overview

Some GitHub organizations restrict access via IP allowlists. Blacksmith’s control plane needs to reach GitHub to register runners and manage workflows. This page lists the IP addresses you must allowlist so Blacksmith can communicate with GitHub. You can manage your organization’s IP allowlist in GitHub under Settings → Security → Authentication security → IP allow list.

Control plane outbound IPs

These IPs are used by Blacksmith’s control plane to communicate with GitHub (not by your CI jobs/runners).
  • 34.107.78.182
  • 63.181.86.27
  • 63.178.35.73

When to allowlist these IPs

You need to allowlist these IPs if:
  • Your GitHub organization has IP allowlists or network restrictions enabled
  • Your jobs are not getting picked up by Blacksmith runners

How this differs from runner static IPs

Blacksmith also offers static IPs for runners as a paid feature, allowing your CI jobs to reach your own external services from a fixed IP. See the Static IP page for details.
  • Control plane IPs (this page): used by Blacksmith to communicate with GitHub
  • Runner static IPs (paid): used by your CI jobs to reach your own external services