- Harden-Runner is not supported when job is run in a container with built-in labels such as
ubuntu-latest, as it needs sudo access on the Ubuntu VM to run. The limitation is if the entire job is run in a container. However, such jobs can be monitored when using custom VM images with GitHub-hosted runners, which requires the Enterprise tier. This is also not a limitation for Self-Hosted runners. - Harden-Runner is not supported on
ubuntu-slimrunners. The agent relies on kernel-level features that require elevated capabilities, which are not available onubuntu-slim. The action detectsubuntu-slimand exits cleanly with an informational log message, without monitoring the job. See issue #627 for details.
- Since ARC Harden Runner uses eBPF, only Linux jobs are supported. Windows and MacOS jobs are not supported.