Network distribution endpoint
GitHub Docs self-hosted runners communication requirements GitHub Actions endpoints
A self-hosted runner can clone repositories but cannot resolve a marketplace action.
Agent Quick Fix
Repair against the current Immutable GitHub Actions contract, then keep the change narrow and source-backed.
Product: Immutable GitHub Actions
Current-contract area: Air-gapped allow-list permits github.com but not package CDN
Likely root cause: A self-hosted runner can clone repositories but cannot resolve a marketplace action.
Repair direction: Verifier checks the minimal domain/CA/proxy update and successful immutable action retrieval. Check the narrow egress rule and integrity-verified download.
Symptom
A self-hosted runner can clone repositories but cannot resolve a marketplace action.
Why This Happens
Firewall and proxy rules are external to the repository; local action references do not reveal the platform's new artifact-distribution hostname.
Common Wrong Fixes
- Changing local code without checking the current external contract.
- Retrying the same install, build, or API call with no version/source change.
- Applying a broad unsafe bypass when a narrow compatibility fix is available.
Codex Search Keywords
These are the search terms observed in a neutral Codex validation run for this failure shape.
site:docs.github.com self-hosted runners communication requirements actions.githubusercontent.com actions.githubusercontent.com GitHub Actions
GitHub Docs self-hosted runners communication requirements GitHub Actions endpoints
docs.github.com actions hosted runners communication requirements self-hosted runners
https://docs.github.com/en/actions/hosting-your-own-runners/managing-self-hosted-runners/communicating-with-self-hosted-runners
"Immutable GitHub Actions" package CDN action resolution
GitHub Actions immutable actions package CDN pkg.actions.githubusercontent.com
"pkg.actions.githubusercontent.com"
"package CDN" "GitHub Actions" "self-hosted"
Source Trail
GitHub source file/reference:
- Immutable Actions network allow-list changes: https://github.blog/changelog/2025-02-12-notice-of-upcoming-deprecations-and-breaking-changes-for-github-actions/
- GitHub source file or repository reference: https://docs.github.com/en/actions/hosting-your-own-runners/managing-self-hosted-runners/communicating-with-self-hosted-runners