Actions: Private networking for GitHub-hosted macOS runners

[github-product-roadmap]

Summary

GitHub is thrilled to announce the availability of private networking for hosted macOS runners. This feature allows users to assign a set of static IPs to a runner or runner group, and also provides the option to use Azure private networking for macOS runners. By executing workflows behind the protection of the Azure Virtual Network, customers can ensure additional network security for workflows that require access to private resources within their network. This will be particularly useful for developers who have enabled IP allow lists, as they can now assign a specific set of static IPs to macOS runners.

Intended Outcome

GitHub now offers private networking capabilities for hosted macOS runners, which enables users to securely access private resources within their on-prem or cloud-based locations, such as databases, artifactory, storage accounts, or APIs. Developers can enforce network security policies and outbound access rules on the runners, which can help to reduce data exfiltration risks. Additionally, developers can isolate their build traffic from the public internet and route it through their existing private network connections (such as VPN or ExpressRoute).

How will it work?

The process of assigning static IPs or setting up Azure private networking for macOS runners is the same as it is for Ubuntu and Windows runners. For more information, please refer to our documentation.

• Azure Private Networking
• Assigning static IPs