Skip to content

[BUG]: Auto-assign not working due to IP restriction #15

@ognis1205

Description

@ognis1205

Is there an existing issue for this?

  • I have searched the existing issues

Current Behavior

The auto-assign action in the GitHub Actions workflow does not work due to an IP restriction.
Even though the action has correct authorization credentials, an IP allowlist prevents the action from executing.

https://github.com/databrickslabs/mcp/actions/runs/14678064325/job/41197199305#step:2:1

Expected Behavior

The auto-assign action should not be used, as it contradicts the Databricks IP allowlist policy. The IP allowlist prevents this workflow from executing, so the workflow should be deleted.

Steps To Reproduce

  1. From a terminal outside of Databricks' IP allowlist.
  2. Post a "take" comment on any issue in the repository that has the auto-assign GitHub Actions workflow enabled.
  3. Observe that the action fails due to the IP restriction.

Relevant log output or Exception details

RequestError [HttpError]: Although you appear to have the correct authorization credentials, the `databrickslabs` organization has an IP allow list enabled, and your IP address is not permitted to access this resource.
    at /home/runner/work/_actions/actions/github-script/v7/dist/index.js:9537:21
    at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
    at async eval (eval at callAsyncFunction (/home/runner/work/_actions/actions/github-script/v7/dist/index.js:35[42](https://github.com/databrickslabs/mcp/actions/runs/14678064325/job/41197199305#step:2:43)4:16), <anonymous>:27:1)
    at async main (/home/runner/work/_actions/actions/github-script/v7/dist/index.js:35522:20) {
  status: 403,
  response: {
    url: 'https://api.github.com/repos/databrickslabs/mcp/issues/13/assignees',
    status: 403,
    headers: {
      'access-control-allow-origin': '*',
      'access-control-expose-headers': 'ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset',
      'content-encoding': 'gzip',
      'content-security-policy': "default-src 'none'",
      'content-type': 'application/json; charset=utf-8',
      date: 'Sat, 26 Apr 2025 05:15:26 GMT',
      'referrer-policy': 'origin-when-cross-origin, strict-origin-when-cross-origin',
      server: 'github.com',
      'strict-transport-security': 'max-age=31536000; includeSubdomains; preload',
      'transfer-encoding': 'chunked',
      vary: 'Accept-Encoding, Accept, X-Requested-With',
      'x-accepted-github-permissions': 'issues=write; pull_requests=write',
      'x-content-type-options': 'nosniff',
      'x-frame-options': 'deny',
      'x-github-api-version-selected': '2022-11-28',
      'x-github-media-type': 'github.v3; format=json',
      'x-github-request-id': '27C1:11057:1921E29:321E22B:680C6BEE',
      'x-ratelimit-limit': '15000',
      'x-ratelimit-remaining': '14999',
Error: Unhandled error: HttpError: Although you appear to have the correct authorization credentials, the `databrickslabs` organization has an IP allow list enabled, and your IP address is not permitted to access this resource.
      'x-ratelimit-reset': '17[45](https://github.com/databrickslabs/mcp/actions/runs/14678064325/job/41197199305#step:2:46)648126',
      'x-ratelimit-resource': 'core',
      'x-ratelimit-used': '1',
      'x-xss-protection': '0'
    },
    data: {
      message: 'Although you appear to have the correct authorization credentials, the `databrickslabs` organization has an IP allow list enabled, and your IP address is not permitted to access this resource.',
      documentation_url: 'https://docs.github.com/rest/issues/assignees#add-assignees-to-an-issue',
      status: '403'
    }
  },
  request: {
    method: 'POST',
    url: 'https://api.github.com/repos/databrickslabs/mcp/issues/13/assignees',
    headers: {
      accept: 'application/vnd.github.v3+json',
      'user-agent': 'actions/github-script octokit-core.js/5.0.1 Node.js/20.19.0 (linux; x64)',
      authorization: 'token [REDACTED]',
      'content-type': 'application/json; charset=utf-8'
    },
    body: '{"assignees":["ognis1205"]}',
    request: {
      agent: [Agent],
      fetch: [Function: proxyFetch],
      hook: [Function: bound bound register]
    }
  }
}

Operating System

macOS

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions