Github action ssh-deploy Security group of Ec2 instance

[amitgupta5888]

In order to use easingthemes /ssh-deploy, what IPs should be allowed in EC2 instance security group where we want to deploy code. Since GitHUB action runner can assume any IP, does it mean that we need to allow SSH on our server from whole internet. is there any workaround for this

[ericghara]

I had the same question. Looks like GitHub runners use Azure's IP address ranges for everything but macOS.

[github-actions[bot]]

This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 5 days.

[easingthemes]

As shared above:

GitHub provides runners that you can use to run your jobs, or you can
...
To get a list of IP address ranges that GitHub Actions uses for GitHub-hosted runners, you can use the GitHub REST API. For more information, see the actions key in the response of the "[Get GitHub meta information](https://docs.github.com/en/rest/reference/meta#get-github-meta-information)" endpoint.

It's a quit big list, so depending on your use case, having self hosted runner can make sense. With self hosted runner, you control IP.