GitHub Actions Blob Storage: New Meta API Hosts to Allowlist
GitHub added new Actions blob storage endpoints to its meta API. Orgs that allowlist individual hosts must add two productionresultssa ranges to avoid job log issues.
GitHub has added new blob storage endpoints for GitHub Actions on github.com, and the meta API now lists them. The change, posted to the GitHub changelog on October 22, 2026, is part of what the company describes as ongoing work to improve capacity and reliability.
The practical effect lands on organizations that restrict outbound traffic with a network allowlist. If you allow individual hosts rather than a wildcard, you need to add the new ones or job summaries and logs may be interrupted, according to GitHub.
Two new host ranges to allow
The new hosts fall into two inclusive ranges:
productionresultssa30.blob.core.windows.netthroughproductionresultssa49.blob.core.windows.netproductionresultssa100.blob.core.windows.netthroughproductionresultssa199.blob.core.windows.net
If your configuration already permits productionresultssa*.blob.core.windows.net, GitHub says no changes are needed for these additions. Only setups that list hosts one by one have work to do.
Where to check your current list
GitHub points administrators to its published IP addresses for general guidance on allowlisting traffic. You can also pull the current endpoint list programmatically through the REST API endpoints for meta data, which is where the new entries now appear.
The announcement covers github.com only and does not mention a timeline for further endpoint additions. For teams that manage firewall rules tightly, it is worth comparing your allowlist against the meta API output rather than waiting for a failed job to surface the gap.
The new endpoints are already live in the meta API, so there is nothing to install or enable. Review your network access settings and add the two ranges above if you allowlist individual hosts. If you have run into other recent GitHub access quirks, our earlier report on Git over HTTPS clones temporarily asking for authentication covers a separate issue.
Sources
- Meta API endpoints updated for Actions blob storage — GitHub Changelog
Some links on this page may be affiliate links. If you buy through them we may earn a commission at no extra cost to you. See our affiliate disclosure.
