GitDocs
Network distribution endpoint

GitHub Actions immutable actions firewall allowlist pkg.actions.githubusercontent.com

Action download fails behind the enterprise firewall while git checkout and API calls still work.

Immutable GitHub ActionsCI/CDNetwork distribution endpointgh_immutable

Agent Quick Fix

Repair against the current Immutable GitHub Actions contract, then keep the change narrow and source-backed.

Product: Immutable GitHub Actions
Current-contract area: Firewall omits immutable action package domain
Likely root cause: Action download fails behind the enterprise firewall while git checkout and API calls still work.
Repair direction: Verifier checks the minimal domain/CA/proxy update and successful immutable action retrieval. Check the narrow egress rule and integrity-verified download.

Symptom

Action download fails behind the enterprise firewall while git checkout and API calls still work.

Why This Happens

Firewall and proxy rules are external to the repository; local action references do not reveal the platform's new artifact-distribution hostname.

Common Wrong Fixes

  • Changing local code without checking the current external contract.
  • Retrying the same install, build, or API call with no version/source change.
  • Applying a broad unsafe bypass when a narrow compatibility fix is available.

Codex Search Keywords

These are the search terms observed in a neutral Codex validation run for this failure shape.

GitHub Actions immutable actions firewall allowlist pkg.actions.githubusercontent.com
site:docs.github.com actions firewall pkg.actions.githubusercontent.com immutable actions
"pkg.actions.githubusercontent.com" "GitHub Actions"
GitHub Actions Immutable Actions public preview firewall domain
"pkg.actions.githubusercontent.com"
"pkg.actions" GitHub
"pkg.actions.github.com"
"immutable actions" "package" "GitHub"
"immutable" "actions" "pkg.actions"
"Immutable GitHub Actions"
GitHub Docs communication requirements self-hosted runners actions domains actions.githubusercontent.com
https://docs.github.com/en/actions/reference/github-hosted-runners-reference

Source Trail

GitHub source file/reference: