From 7e82759601e2639a95b96349bc958af7204fe081 Mon Sep 17 00:00:00 2001
From: Kevin Johnson <kevin@secureideas.com>
Date: Mon, 4 May 2026 10:25:11 -0400
Subject: [PATCH] Added github pages IPs from the API

---
 .gitignore             |  1 +
 shadow_saas_surface.py | 14 ++++++++++----
 2 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/.gitignore b/.gitignore
index d93f8cf..535e913 100644
--- a/.gitignore
+++ b/.gitignore
@@ -32,3 +32,4 @@ Thumbs.db
 .idea/
 *.swp
 *.swo
+.vs
diff --git a/shadow_saas_surface.py b/shadow_saas_surface.py
index db5a0b9..faf3491 100644
--- a/shadow_saas_surface.py
+++ b/shadow_saas_surface.py
@@ -33,10 +33,16 @@
 ]
 
 GITHUB_PAGES_IPS = {
-    "185.199.108.153",
-    "185.199.109.153",
-    "185.199.110.153",
-    "185.199.111.153"
+    "192.30.252.153/32",
+    "192.30.252.154/32",
+    "185.199.108.153/32",
+    "185.199.109.153/32",
+    "185.199.110.153/32",
+    "185.199.111.153/32",
+    "2606:50c0:8000::153/128",
+    "2606:50c0:8001::153/128",
+    "2606:50c0:8002::153/128",
+    "2606:50c0:8003::153/128"
 }
 
 # Azure provider 404 page signatures — confirms the app slot is deleted/unprovisioned.