GitHub Actions: More Control Over Hosted Runners
GitHub Actions now offers organizations enhanced control over their hosted runners. Administrators can disable default runner labels and manage macOS runners through groups, improving security and capacity management. This feature is available for Team and Enterprise plans, providing granular control over runner access and concurrency.
- →Control macOS Runner Access via Runner Groups
- →Disable Standard Hosted Runner Labels
- →Availability and Limitations
Features (2) ›
- Control macOS Runner Access via Runner Groups
Organizations can now restrict access to macOS runners by defining group-level permissions for specific organizations, repositories, or workflows. This allows for better management of capacity and costs by enforcing concurrency limits and routing jobs through defined policies.
- Disable Standard Hosted Runner Labels
Administrators can disable standard hosted runner labels like 'ubuntu-latest' to enforce the use of runner groups. This feature helps ensure that workflows utilize runners configured according to organizational security and capacity requirements.
Notes (1) ›
- Availability and Limitations
This enhanced control over GitHub-hosted runners is available on Team and Enterprise plans. Network configurations are not currently supported for macOS runners.
https://github.blog/changelog/2026-06-25-more-control-over-your-github-hosted-runners