01
Fleet readiness
Heartbeats, labels, architecture, status, runner scope, and recent checks from managed agents and GitHub events.
# GET /api/runners
{
"name": "caelicode-runner-01",
"labels": ["self-hosted", "linux", "arm64"],
"status": "online",
"heartbeat": "18s ago",
"checks": { "actions_runner": "ok" }
}
02
Repository policy
Allowed repositories, required labels, and online runner coverage checked before the workflow gets stranded.
repositorygithub-user-management
requires[self-hosted, arm64]
online matchcaelicode-runner-01
decisionready · 2 candidates
03
Tokenized enrollment
Short-lived registration tokens minted through a GitHub App, scoped to a repository and issued only when needed.
sudo GITHUB_OWNER=caelicode \
GITHUB_REPO=runnerly \
RUNNER_LABELS=linux,arm64 \
bash install-github-runner.sh
04
Job evidence
Every workflow job links back to its repository, runner labels, webhook delivery, and operator events.
jobbuild-image #2491
workflowonboarding.yml
runnercaelicode-runner-01
auditworkflow_job.completed