Or as alternative they should host internal runners. So you are on whitelisted ips. https://docs.github.com/en/actions/hosting-your-own-runners/about-self-hosted-runners