Problem

When GITHUB_TOKEN (or MISE_GITHUB_TOKEN) is set, mise sends Authorization: Bearer {token} on all requests to api.github.com. If the target GitHub organization has an IP allow list enabled, GitHub blocks the authenticated request with 403 — even for fully public repos.

The counterintuitive part: the same request without the Authorization header succeeds (GitHub explicitly exempts anonymous public repo access from IP allow lists). So setting GITHUB_TOKEN to get a higher rate limit actually breaks tool installation for orgs with IP allow lists.

Affected tools

Any tool whose GitHub org has an IP allow list enabled. Examples we hit in CI:

• aqua:aquasecurity/trivy
• github:databricks/cli

Exact 403 response body

{
  "message": "Although you appear to have the correct authorization credentials, the `aquasecurity` organization has an IP allow list enabled, and your IP address is not permitted to access this resource.",
  "documentation_url": "https://docs.github.com/rest/releases/releases#list-releases",
  "status": "403"
}

Key: x-ratelimit-remaining is ~15,000 in these responses. This is not a rate limit issue.

Verification (same IP, same token, same moment)

# With auth → 403
curl -sS -o /dev/null -w "%{http_code}" \
  -H "Authorization: token $GITHUB_TOKEN" \
  "https://api.github.com/repos/aquasecurity/trivy/releases/tags/v0.69.3"
# → 403

# Without auth → 200
curl -sS -o /dev/null -w "%{http_code}" \
  "https://api.github.com/repos/aquasecurity/trivy/releases/tags/v0.69.3"
# → 200

# CDN download with auth → 200 (CDN bypasses IP allow lists)
curl -sS -o /dev/null -w "%{http_code}" -L \
  -H "Authorization: token $GITHUB_TOKEN" \
  "https://github.com/aquasecurity/trivy/releases/download/v0.69.3/trivy_0.69.3_Linux-ARM64.tar.gz"
# → 200

Why this happens

Per GitHub docs, IP allow lists block access to public resources when a user is authenticated (PATs, OAuth tokens, GitHub App installation tokens). Anonymous access to public resources is explicitly exempted.

So by authenticating, mise opts itself into IP allow list enforcement that anonymous requests bypass.

Proposed fix

In the HTTP layer (src/http.rs / src/github.rs), when a request to api.github.com returns 403 and the response body contains "IP allow list", retry the same request without the Authorization header.

This is safe because:

• The resource is public (anonymous request succeeds)
• Only stripping auth on retry, no other behavior changes
• The error message is distinctive enough to avoid false positives

Workaround

Pre-install affected binaries via CDN before mise install runs. Since CDN downloads work fine with auth, download the tarball directly and place the binary at the path mise expects (~/.local/share/mise/installs/{tool}/{version}/). mise detects it as already installed and skips the API calls entirely.

mise version

2026.4.11 linux-x64 (also reproduced on earlier versions)