OK, updating the Travis IPs in our GCP firewall config seems to have fixed the issue