Security hardening for GitHub Actions 🔒

[Akash1134]

🆕 You can now create single-use self-hosted runner registration tokens using the REST API.

When a runner registers using one of these tokens it will only be allowed to run a single job before being automatically removed from the repository, organization, or enterprise. This enables you to improve the security of your self-hosted runner infrastructure by limiting the exposure of long lived credentials.

Once you have the config file from the REST API response, you can pass it to the runner at startup.

./run.sh --jitconfig ${encoded_jit_config}

Learn more about just-in-time runners 🚀