🇪🇺 Static IP for GitHub Actions — CI/CD Pipeline Proxy

🇪🇺 Static IP for GitHub Actions

GitHub Actions hosted runners get a new IP on every workflow run. Get a dedicated, fixed EU IP for all your CI/CD pipelines. Whitelist once. Deploy with confidence.

.github/workflows/deploy.yml

# .github/workflows/deploy.yml

jobs:

deploy:

runs-on: ubuntu-latest

env:

HTTPS_PROXY: "https://user:pass@eu-01.outboundgateway.com:8443"

# Your deploy step

steps:

- run: curl https://api.partner-service.com/deploy

The Problem

GitHub Actions hosted runners get new IPs on every workflow run, making API whitelisting impossible

Dynamic Runner IPs

GitHub-hosted runners spin up fresh VMs for every job. Each run gets a different outbound IP. API providers reject unknown source IPs and your workflows fail.

No Built-In Static IP

GitHub doesn't offer static outbound IPs for hosted runners. The only alternative is self-hosted runners — but they require maintenance, patching, and infrastructure management.

Pipeline Failures Break Production

Deployments get rejected. API calls fail. Webhook deliveries are blocked. When your CI/CD pipeline can't reach external services, your release process grinds to a halt.

EU Compliance Requirements

European teams need EU-based outbound infrastructure for GDPR and regulatory compliance. CI/CD workloads touching production systems must respect data residency requirements.

When a Partner Asks

"Provide the IP address that will access our API."

You need a stable, predictable answer for your GitHub Actions workflows — not an IP that changes with every run.

The Solution

Use a Dedicated HTTPS Proxy with Static EU-Based IP

GitHub Actions

HTTPS Proxy

(Static EU IP)

External API

The external API sees one fixed EU IP address — every workflow run.

No workflow script modifications required — just set environment variables
Works with GitHub-hosted runners and self-hosted runners
Store proxy credentials in GitHub Secrets for security

Why GitHub Actions Users Choose This

Dedicated static outbound IP for all workflow jobs
No self-hosted runners needed — keep using GitHub-hosted runners
Store credentials in GitHub Secrets — secure, no hardcoded values
EU-hosted infrastructure for GDPR compliance
Simple env configuration — no runner changes, no custom images
Works across all repositories and organizations in your GitHub account

Designed For

DevOps Engineers

Building CI/CD pipelines that deploy to secure environments requiring IP whitelisting

Platform Teams

Managing GitHub Actions infrastructure and ensuring pipeline reliability across organizations

Open Source Maintainers

Running GitHub Actions workflows that connect to external APIs and services needing IP allowlisting

B2B SaaS Companies

Deploying to partner environments and integrating with external APIs through automated pipelines

How It Works

Your GitHub Actions workflows run on hosted or self-hosted runners. Outbound HTTPS requests are routed through your dedicated proxy. All requests originate from a single static EU IP. You whitelist that IP once. That's it.

Basic Setup for GitHub Actions

Add the proxy URL as a GitHub Secret, then reference it as an environment variable in your workflow. This works with all HTTP clients, all languages, and both hosted and self-hosted runners.

# .github/workflows/deploy.yml
name: Deploy

on: [push]

jobs:
  deploy:
    runs-on: ubuntu-latest
    env:
      HTTPS_PROXY: "https://user:pass@eu-01.outboundgateway.com:8443"
      HTTP_PROXY: "https://user:pass@eu-01.outboundgateway.com:8443"
    steps:
      - uses: actions/checkout@v4
      - run: curl -X POST https://api.partner-service.com/deploy

🔒 Using GitHub Secrets: Store your proxy URL as a repository or organization secret:

Go to Settings → Secrets and variables → Actions → New repository secret
Name: PROXY_URL
Value: https://user:pass@eu-01.outboundgateway.com:8443

📖 Complete Documentation: For detailed examples, error handling, and advanced configurations, see our Python SSL Proxy Guide, Node.js Guide, and all other language guides.

Built for European Businesses

When your partners care about where traffic originates, location matters.

EU-Hosted Infrastructure

Your proxy infrastructure is hosted entirely in the European Union, ensuring data remains within EU jurisdictions.

GDPR-Conscious Environments

Designed for GDPR-conscious environments with data handling practices that align with European privacy regulations.

No US-Based Routing

Traffic is routed entirely within EU infrastructure. No detours through US-based servers that could complicate compliance.

Clear Outbound Identity for Compliance

One static IP address provides clear outbound identity for compliance audits and partner requirements.

Why Developers Choose OutboundGateway for GitHub Actions

Dedicated Static IP

One fixed IP for all API requests. Whitelist once, use forever.

Keep Hosted Runners

No need to manage self-hosted runners just for static IPs. Keep using GitHub-hosted ubuntu-latest, windows-latest, macos-latest.

GitHub Secrets Integration

Store proxy credentials in GitHub Secrets. No hardcoded values in your workflow files. Secure by default.

No Runner Changes

No custom runner images. No VPC modifications. Pure environment variable configuration.

End-to-End Encryption

TLS passthrough means we can't see your traffic. Your API keys stay secure.

Production-Ready

Retry logic and error handling. Session management included. Built for 24/7 CI/CD workloads.

Get Your Static EU IP for GitHub Actions

Stop updating IP whitelists when GitHub runners change. Start using a dedicated, EU-based static IP for all your workflows today.

€29/month starter plan • 7-day refund policy • Direct founder support

Still Deciding?

We're happy to help you determine if OutboundGateway is the right fit for your GitHub Actions workflows.

Contact Our Founders →