# Error: The self-hosted runner's IP address is not allowed by the organization's network policy.

- **ID:** `policy/github-actions-self-hosted-runner-ip-restricted`
- **Domain:** policy
- **Category:** auth_error
- **Verification:** ai_generated
- **Fix Rate:** 92%

## Root Cause

Organization network policy restricts outbound traffic from self-hosted runners to specific IP ranges, and the runner's IP is not whitelisted.

## Version Compatibility

| Version | Status | Introduced | Deprecated |
|---------|--------|------------|------------|
| GitHub Actions 2024-06-01 | active | — | — |
| actions/runner 2.315.0 | active | — | — |

## Workarounds

1. **Add the self-hosted runner's public IP to the organization's allowed IP list via GitHub settings > Organization > Security > Network policy.** (95% success)
   ```
   Add the self-hosted runner's public IP to the organization's allowed IP list via GitHub settings > Organization > Security > Network policy.
   ```
2. **Use GitHub-hosted runners instead, which have dynamic IPs already whitelisted by most policies.** (90% success)
   ```
   Use GitHub-hosted runners instead, which have dynamic IPs already whitelisted by most policies.
   ```

## Dead Ends

- **Disable the organization's network policy entirely** — Network policies are enforced by security teams; disabling them requires approval and may violate compliance. (90% fail)
- **Use a different self-hosted runner with the same IP** — The IP is the same; the policy blocks the IP range, not the runner itself. (100% fail)