# GitHub Actions immutable actions TLS handshake error resolving immutable action package certificate

Status: search-observed
Product: Immutable GitHub Actions
Last verified: 2026-06-25
Canonical HTML: https://gitdocs.org/fix/github-actions-immutable-actions-tls-handshake-error-resolving-immutable-action-package-certific
Machine JSON: https://gitdocs.org/api/fixes/github-actions-immutable-actions-tls-handshake-error-resolving-immutable-action-package-certific.json

## Exact Symptom

See the observed Codex queries below.

## Diagnosis

Firewall and proxy rules are external to the repository; local action references do not reveal the platform's new artifact-distribution hostname.

## Fix

```
Verifier checks the minimal domain/CA/proxy update and successful immutable action retrieval. Check the narrow egress rule and integrity-verified download.
```

## Avoid

- Changing local code without checking the current external contract.
- Retrying the same install, build, or API call with no version/source change.
- Applying a broad unsafe bypass when a narrow compatibility fix is available.

## Observed Codex Queries

- GitHub Actions immutable actions TLS handshake error resolving immutable action package certificate
- GitHub Actions immutable actions docs package endpoint
- site:docs.github.com immutable actions GitHub Actions

## Sources

- Immutable Actions network allow-list changes: https://github.blog/changelog/2025-02-12-notice-of-upcoming-deprecations-and-breaking-changes-for-github-actions/