updates.drupal.org returning 403 on GitHub Actions
>>> [!note] Migrated issue <!-- Drupal.org comment --> <!-- Migrated from issue #3576591. --> Reported by: [longwave](https://www.drupal.org/user/246492) >>> <h3 id="summary-problem-motivation">Problem/Motivation</h3> <p>Via @mxr576 in Slack:</p> <blockquote><p>Since Friday my builds on Drupal Dependency Quality Gate are failing due to HTTP 403 - I did not know that is a possible HTTP code on that endpoint.</p></blockquote> <div class="codeblock"> <pre><span style="color: #000000"><span style="color: #0000BB">&lt;?php<br>Next RuntimeException</span><span style="color: #007700">: </span><span style="color: #0000BB">Failed to fetch project information </span><span style="color: #007700">for </span><span style="color: #DD0000">"3545283"</span><span style="color: #007700">. </span><span style="color: #0000BB">Reason</span><span style="color: #007700">: </span><span style="color: #DD0000">"Client error: `GET https://updates.drupal.org/release-history/3545283/current` resulted in a `403 Forbidden` response:<br>&lt;!DOCTYPE html&gt; &lt;html lang="</span><span style="color: #0000BB">en</span><span style="color: #DD0000">"&gt; &lt;head&gt; &lt;meta charset="</span><span style="color: #0000BB">utf</span><span style="color: #007700">-</span><span style="color: #0000BB">8</span><span style="color: #DD0000">"&gt; &lt;meta name="</span><span style="color: #0000BB">viewport</span><span style="color: #DD0000">" content="</span><span style="color: #0000BB">width</span><span style="color: #007700">=</span><span style="color: #0000BB">device</span><span style="color: #007700">-</span><span style="color: #0000BB">width</span><span style="color: #007700">, </span><span style="color: #0000BB">initia </span><span style="color: #007700">(</span><span style="color: #0000BB">truncated</span><span style="color: #007700">...)<br></span><span style="color: #DD0000">". in /home/runner/work/ddqg/ddqg/src/Infrastructure/DrupalOrg/UpdateStatusApi/DrupalUpdateStatusApiUsingGuzzleRepository.php:173<br>?&gt;</span></span></pre></div> <p><a href="https://github.com/mxr576/ddqg/actions/runs/22558994249/job/65341631459">https://github.com/mxr576/ddqg/actions/runs/22558994249/job/65341631459</a></p> <hr> <p>Also reported to the security team from @arnested:</p> <blockquote><p>We monitor for security updates by fetching<br> <a href="https://updates.drupal.org/release-history/drupal/all">https://updates.drupal.org/release-history/drupal/all</a> from GitHub Actions. </p> <p>Since February 28 we have been getting 403 errors when trying to get the URL in GitHub Actions (but not from other locations). </p> <p>Have GitHub's IP addresses been put on a deny list or something? </p></blockquote> <h4 id="summary-steps-reproduce">Steps to reproduce</h4> <h3 id="summary-proposed-resolution">Proposed resolution</h3> <h3 id="summary-remaining-tasks">Remaining tasks</h3> <h3 id="summary-ui-changes">User interface changes</h3> <h3 id="summary-api-changes">API changes</h3> <h3 id="summary-data-model-changes">Data model changes</h3>
issue