DocumentationExperience Cloud KCS

AEM as a Cloud Service pipeline fails due to GitHub IP allow list

Last update: August 31, 2026

This article explains how to troubleshoot a Cloud Manager pipeline that fails during source retrieval because a GitHub IP allow list blocks access from Cloud Manager. To fix this, confirm the source retrieval error, obtain the IP addresses that Cloud Manager uses, add them to the GitHub organization or repository allow list, and rerun the pipeline.

Description description

Environment

  • Adobe Experience Manager as a Cloud Service
  • Cloud Manager pipeline connected to a GitHub repository
  • GitHub organization or repository with IP allow list restrictions enabled

Symptoms

  • The Cloud Manager pipeline fails during the source retrieval step.
  • The build log shows HTTP status code 403 (Forbidden) when Cloud Manager attempts to access the GitHub repository.
  • The error message indicates that the GitHub repository or organization has an IP allow list enabled and the IP address used by Cloud Manager is not permitted.

Cause

GitHub’s IP allow list blocks access from the IP address used by the Cloud Manager build service. As a result, Cloud Manager cannot retrieve the source code from the repository, and the pipeline fails before the build process begins.

Resolution resolution

Follow these steps to allow Cloud Manager to retrieve source code from the GitHub repository.

  1. Open the failed Cloud Manager pipeline and review the build log. Confirm that the source retrieval step returns 403 Forbidden and indicates that the GitHub IP allow list blocks the Cloud Manager build service.
  2. Record any Cloud Manager IP address shown in the source retrieval error.
  3. Obtain the complete list of IP addresses that must be allowed for Cloud Manager by contacting Adobe Support.
  4. Ask your GitHub organization administrator to open the applicable GitHub organization or repository settings.
  5. Navigate to Authentication security > IP allow list at the organization level, or open the equivalent repository-level setting.
  6. Add the required Cloud Manager IP addresses to the GitHub IP allow list.
  7. Save the changes to update the IP allow list.
  8. Rerun the Cloud Manager pipeline and verify that the source retrieval step succeeds and that the pipeline proceeds as expected.

Add a private GitHub Repository in Cloud Manager

recommendation-more-help
experience-cloud-kcs-help-kbarticles