-
Notifications
You must be signed in to change notification settings - Fork 41
Closed
Labels
bugSomething isn't workingSomething isn't working
Description
Is there an existing issue for this?
- I have searched the existing issues
Current Behavior
The auto-assign action in the GitHub Actions workflow does not work due to an IP restriction.
Even though the action has correct authorization credentials, an IP allowlist prevents the action from executing.
https://github.com/databrickslabs/mcp/actions/runs/14678064325/job/41197199305#step:2:1
Expected Behavior
The auto-assign action should not be used, as it contradicts the Databricks IP allowlist policy. The IP allowlist prevents this workflow from executing, so the workflow should be deleted.
Steps To Reproduce
- From a terminal outside of Databricks' IP allowlist.
- Post a "take" comment on any issue in the repository that has the auto-assign GitHub Actions workflow enabled.
- Observe that the action fails due to the IP restriction.
Relevant log output or Exception details
RequestError [HttpError]: Although you appear to have the correct authorization credentials, the `databrickslabs` organization has an IP allow list enabled, and your IP address is not permitted to access this resource.
at /home/runner/work/_actions/actions/github-script/v7/dist/index.js:9537:21
at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
at async eval (eval at callAsyncFunction (/home/runner/work/_actions/actions/github-script/v7/dist/index.js:35[42](https://github.com/databrickslabs/mcp/actions/runs/14678064325/job/41197199305#step:2:43)4:16), <anonymous>:27:1)
at async main (/home/runner/work/_actions/actions/github-script/v7/dist/index.js:35522:20) {
status: 403,
response: {
url: 'https://api.github.com/repos/databrickslabs/mcp/issues/13/assignees',
status: 403,
headers: {
'access-control-allow-origin': '*',
'access-control-expose-headers': 'ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Resource, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, X-GitHub-SSO, X-GitHub-Request-Id, Deprecation, Sunset',
'content-encoding': 'gzip',
'content-security-policy': "default-src 'none'",
'content-type': 'application/json; charset=utf-8',
date: 'Sat, 26 Apr 2025 05:15:26 GMT',
'referrer-policy': 'origin-when-cross-origin, strict-origin-when-cross-origin',
server: 'github.com',
'strict-transport-security': 'max-age=31536000; includeSubdomains; preload',
'transfer-encoding': 'chunked',
vary: 'Accept-Encoding, Accept, X-Requested-With',
'x-accepted-github-permissions': 'issues=write; pull_requests=write',
'x-content-type-options': 'nosniff',
'x-frame-options': 'deny',
'x-github-api-version-selected': '2022-11-28',
'x-github-media-type': 'github.v3; format=json',
'x-github-request-id': '27C1:11057:1921E29:321E22B:680C6BEE',
'x-ratelimit-limit': '15000',
'x-ratelimit-remaining': '14999',
Error: Unhandled error: HttpError: Although you appear to have the correct authorization credentials, the `databrickslabs` organization has an IP allow list enabled, and your IP address is not permitted to access this resource.
'x-ratelimit-reset': '17[45](https://github.com/databrickslabs/mcp/actions/runs/14678064325/job/41197199305#step:2:46)648126',
'x-ratelimit-resource': 'core',
'x-ratelimit-used': '1',
'x-xss-protection': '0'
},
data: {
message: 'Although you appear to have the correct authorization credentials, the `databrickslabs` organization has an IP allow list enabled, and your IP address is not permitted to access this resource.',
documentation_url: 'https://docs.github.com/rest/issues/assignees#add-assignees-to-an-issue',
status: '403'
}
},
request: {
method: 'POST',
url: 'https://api.github.com/repos/databrickslabs/mcp/issues/13/assignees',
headers: {
accept: 'application/vnd.github.v3+json',
'user-agent': 'actions/github-script octokit-core.js/5.0.1 Node.js/20.19.0 (linux; x64)',
authorization: 'token [REDACTED]',
'content-type': 'application/json; charset=utf-8'
},
body: '{"assignees":["ognis1205"]}',
request: {
agent: [Agent],
fetch: [Function: proxyFetch],
hook: [Function: bound bound register]
}
}
}Operating System
macOS
Metadata
Metadata
Assignees
Labels
bugSomething isn't workingSomething isn't working