---
id: "INC-github-bmpybhnrky3x"
kind: "incident"
aliases: []
title: "GitHub: Intermittent failures in runner group and runner-related permissions pages"
severity: "medium"
cvss: null
epss: null
exploited: false
status: "resolved"
category: "vendor"
products: [{"name": "GitHub", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["ci", "git", "github", "github-actions", "incident", "security", "vendor"]
not_affected_if: ["no-actions-runners"]
published_at: "2026-08-18T07:40:35+00:00"
first_seen_at: "2026-10-23T19:12:22+00:00"
updated_at: "2026-10-23T21:53:00+00:00"
sources: [{"source": "statuspage", "url": "https://stspg.io/98zqb1k9jh0x", "first_seen_at": "2026-10-23T19:12:22+00:00"}]
---

# GitHub: Intermittent failures in runner group and runner-related permissions pages

GitHub had an outage from 05:02 to 11:30 UTC on August 18, 2026, where Actions Runner and Runner Group pages and APIs failed. The cause was an expired internal authentication certificate, and no attacker access is described.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:GitHub affected ? fixed ?

## Fix

No customer action is described; GitHub restored service by enabling the rotated certificate.

## Timeline

- 2026-10-23T19:12:22+00:00 statuspage https://stspg.io/98zqb1k9jh0x

## From the sources

On August 18, 2026, between 05:02 UTC and 11:30 UTC, customers were unable to view or manage Actions Runners and Runner Groups through the GitHub UI and API. The issue was caused by failures in backend requests reading runner and runner group data. The failures were caused by an expired authentication certificate unique to this service. The certificate had been rotated in KeyVault, but a step to enable use at runtime had been paused to prevent recurrence of previous incidents triggered by this operation. The impact was mitigated by completing the enablement of the new certificate in the backend system. We have added additional monitoring to this and other certificates. This service is also in the process of being replaced as part of our availability and scale work, bringing this authentication path and secret management in line with patterns across all GitHub services.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_