Does SonarCloud support the GitHub IP Whitelist feature or offer a list of public IP addresses for whitelisting? Other GitHub Marketplace Apps will automatically add themselves to an organizations IP whitelist (Dependabot, for example) but it didn’t seem like SonarCloud offered that same functionali…

Hi @LeaderXFX , and welcome to the community! Indeed, SonarCloud does not provide fixed public IP addresses. The IP addresses you will get when resolving sonarcloud.io will change with time. Regards, @AlxO

Hi, I am wondering if this is still the case? There is no fixed IP address for sonarcloud? Thanks, J

Hi @void , Yes this is still the case. As of today, we have no plans to provide fixed IP addresses for sonarcloud.io . Would you want to share your use case and its rationale? Regards, @AlxO

Hi @AlxO My company has Github IP Whitelisting enabled. It is so that developers must be on the VPN to access source code I have seen comments on other posts that the public IP’s are rotating and that is true AWS ELB’s for requests from Github to SonarCloud, but the Github IP Whitelisting restrict…

Hi @pexa-afarrugia , Thanks for your feedback. I’ve captured it as input for our product future features. You can track and contribute to features at this location: SonarCloud | Product Roadmap Regards, @AlxO

Hi, I couldn’t find anything regarding Github IP Whitelist support on the roadmap. Is there any chance that this will be supported in the near future? Github also support to update IP allow list automatically for IP address provided by Github App providers. This would help to address the challenge…

Hello @florian.gessner , Welcome to the community, and thank you for your feedback! This feature is not on our short-term roadmap, but we’ll keep a record of this and continue to lookout for similar requests. We’ll update this thread if anything changes.

I’m in the same situation. I’ll need to pool for your IPs and add manually to github IP locking (cause there’s no API for it) Would suggest what Atlassian did with their github app [image]

@ AlexO just to confirm. Are these IPs used by sonarcloud to fetch git? dig sonarcloud.io ; <<>> DiG 9.10.6 <<>> sonarcloud.io ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28927 ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1 ;; …

Hello @MarcinDBLK , Welcome to the community! We are working on this topic right now and likely are going to have an update sometime next week. I’ll post an update to this thread once we have more information to share.

GitHub IP Whitelist and SonarCloud

SonarQube Cloud

Martin_Bednorz (Martin Bednorz) October 12, 2023, 1:18pm 14

This is now available for SonarCloud: Static IPs for outgoing calls to DevOps platforms

Topic		Replies	Views
SonaCloud Public IP addresses SonarQube Cloud	3	1287	October 16, 2023
IPs to whitelist so internal gitlab can hook up to sonar cloud SonarQube Cloud	2	670	October 5, 2021
Exit gateways of sonarcloud SonarQube Cloud github	2	1092	October 16, 2023
Static IPs for outgoing calls to DevOps platforms Announcements sonarqube-cloud	5	1530	July 11, 2024
Bitbucket Cloud allowlisted IP addresses and SonarCloud SonarQube Cloud	3	1851	October 16, 2023

GitHub IP Whitelist and SonarCloud

Related topics