Features

Everything you need to run a secure, isolated GitHub Actions runner fleet.

Complete VM Isolation

Every runner operates in its own virtual machine. This means complete process isolation, separate file systems, and no possibility of jobs interfering with each other. When a job completes, the VM can be reset to a clean state.

gar fleet create --name isolated-runner --cpus 4 --memory 8

Creating VM with 4 CPUs, 8GB RAM...

Secure Token Storage

Your GitHub tokens are stored in your macOS Keychain, protected by the same security that guards your passwords. Tokens never touch the GAR database and are only accessed when needed.

Security Note

Tokens are stored in macOS Keychain and accessed securely at runtime. They never appear in config files or logs.

Native macOS Menu Bar

See your entire fleet status without opening a terminal. The native menu bar app shows which VMs are running, their health status, and refreshes every 60 seconds. Click any runner for quick actions.

GAR Fleet

ci-runner-1Online

ci-runner-2Online

build-runnerBusy

Powerful CLI

Manage your entire fleet from the command line. Create runners, customize VM resources, query GitHub for registered runners, and more. Everything scriptable for automation.

fleet create

Create new runner

fleet destroy

Remove runner

fleet list

Show all runners

vm shell

SSH into VM