Runners behind an IP allow list: which type reaches internal resources
This sheet compares Standard GitHub-hosted, Larger runners, Self-hosted runners.
| Criterion | Standard GitHub-hosted | Larger runners | Self-hosted runners |
|---|---|---|---|
| IP behaviour | Too many frequently changing ranges to allowlist reliably | Static IPs suitable for an allow list | Your own fixed IP addresses |
The verdict, the full comparison, 3 rules and 2 traps are part of GH-200 access. Unlock GH-200.