Broken integration with github enterprise after enabling IP filtering

For Workers & Pages, what is the name of the domain?

.com

What is the error message?

The repository owner has an IP allow list enabled, and 34.127.95.225 is not permitted to access this repository

What is the issue or error you’re encountering

CF Pages worker cannot access github repository while IP filtering is enabled.

What steps have you taken to resolve the issue?

After enabling on github enterprise side allowlisting via IP allow list and filtering out other requests we noticed that cloudflare pages workers are unable to connect and build pages with errors like ’ The repository owner has an IP allow list enabled, and 34.127.95.225 is not permitted to access this repository’ .

The thing is the IP mentioned in log differs each run we tried to build it. Is there any IP range that can be defined on github side?
The ones mentioned here didn’t work - IP Ranges

Also the option enabled on github side didn’t help ‘Enable IP allow list configuration for installed GitHub Apps Enabling will automatically set up IP allow list entries for GitHub Apps installed on organizations in this enterprise.’
We have enterprise account with two organizations. Cloudflare Workers and Pages app is installed on organization level.

From github support:

I’ve checked on our backend and it doesn’t seem we have any IPs stored for the app in question. So indeed, it would need to either be updated by Cloudflare with the IPs they operate the app from, or you would need to reach out to them and get the IPs to add manually.

They claim I need to obtain the IP addresses range from you and provide it explicitly on github settings.

What are the steps to reproduce the issue?

Enabling IP filtering on github enterprise “Authentication security”

Screenshot of the error

aaa

Ok we got response from Cloudflare staff, that they do not care and IPs won’t be shared.

So as summary

after enabling IP filtering on github.com Cloudflare Pages app becomes unusable.