Self-hosted runners added at the organization level can process jobs for all repositories in the organization. If you need to limit access to your self-hosted runners, you can configure the policy to only process jobs for private repositories, or you can define a list of permitted repositories.
Controlling which repositories have access to an organization's runners
-
On GitHub, navigate to the main page of the organization.
-
Under your organization name, click Settings.
-
In the left sidebar, click Actions.
-
Next to "Self-hosted runners", click Manage repository permissions.
-
From the drop-down menu, choose one of the following options:
- All repositories - All public and private repositories in the organization can send jobs to the organization's self-hosted runners.
- Private repositories - Only private repositories in the organization can send jobs to the organization's self-hosted runners.
- Selected repositories - Use the repository selection menu to choose which repositories in the organization can send jobs to the organization's self-hosted runners.