Actions: Private networking for GitHub-hosted macOS runners

[github-product-roadmap]

Summary

GitHub is thrilled to announce the availability of private networking for hosted macOS runners. This feature allows users to assign a set of static IPs to a runner or runner group, and also provides the option to use Azure private networking for macOS runners. By executing workflows behind the protection of the Azure Virtual Network, customers can ensure additional network security for workflows that require access to private resources within their network. This will be particularly useful for developers who have enabled IP allow lists, as they can now assign a specific set of static IPs to macOS runners.

Intended Outcome

GitHub now offers private networking capabilities for hosted macOS runners, which enables users to securely access private resources within their on-prem or cloud-based locations, such as databases, artifactory, storage accounts, or APIs. Developers can enforce network security policies and outbound access rules on the runners, which can help to reduce data exfiltration risks. Additionally, developers can isolate their build traffic from the public internet and route it through their existing private network connections (such as VPN or ExpressRoute).

How will it work?

The process of assigning static IPs or setting up Azure private networking for macOS runners is the same as it is for Ubuntu and Windows runners. For more information, please refer to our documentation.

• Azure Private Networking
• Assigning static IPs

[ankneis]

Re-opening - as this has not yet shipped.

[ankneis]

This issue is being closed as outdated. For more information, please check out this Discussion post. Stay tuned for new additions to our refreshed public roadmap!

[ankneis]

We wanted to provide more details on why we removed this from the roadmap. We continue to plan to bring private networking to macOS runners, but we have removed this from our roadmap for now until we have more certainty on our timeline.

If you’re interested in this feature, please share your feedback in the GitHub community so we can track interest and consider it in the future.