{"id":"INC-github-kzh5j0mt7qwc","kind":"incident","aliases":[],"related":[],"title":"GitHub: Actions Larger Runner Jobs for some customers may be slow to start","description":"On September 14, 2026, between 16:10 and 19:01 UTC, some customers using GitHub Actions larger runners experienced longer-than-normal wait times for jobs to start. During this period, 5.7% of larger-runner jobs were affected. A routine expansion of our compute capacity exposed a bug in how our provisioning system handled capacity records when selecting where to create runner virtual machines. This slowed the creation of new runners, leaving insufficient runner capacity to start affected jobs promptly. We restored normal provisioning by correcting the affected capacity records. We have fixed the underlying capacity-selection bug to prevent this failure from recurring. We have also added alerts for VM-record creation failures associated with this capacity issue.","summary":"GitHub Actions larger runner jobs were delayed from 16:10 to 19:01 UTC on September 14, 2026, because a provisioning bug slowed runner VM creation. This is an availability incident with no attacker access involved.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"GitHub","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["ci","git","github","github-actions","incident","larger-runners","security","vendor"],"not_affected_if":["no-larger-runners","self-hosted-runners-only"],"how_to_check":null,"fix":null,"status":"resolved","published_at":"2026-09-14T18:40:25+00:00","first_seen_at":"2026-10-23T19:12:22+00:00","triaged_at":"2026-10-23T21:50:52+00:00","updated_at":"2026-10-23T21:50:52+00:00","category":"vendor","confidence":0.8,"triage":{"at":"2026-10-23T21:50:52Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","impact":"low","summary":"GitHub Actions larger runner jobs were delayed from 16:10 to 19:01 UTC on September 14, 2026, because a provisioning bug slowed runner VM creation. This is an availability incident with no attacker access involved.","category":"vendor","who_cares":["github-actions","ci","larger-runners"],"confidence":0.8,"needs_auth":"no","worst_case":"Larger runner jobs start late; no code execution or data exposure reported.","analyst_note":"","how_to_check":"unknown","needs_analyst":false,"not_affected_if":["no-larger-runners","self-hosted-runners-only"],"user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"low"},"cost_usd":0.000431,"input_tokens":2935,"output_tokens":274,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'01':43B,76C '10':40B,73C '14':47B,69C '16':39B,72C '19':42B,75C '2026':48B,70C '5.7':99C 'access':65B 'action':2A,24B,32B,82C 'add':177C 'affect':106C,146C,156C 'alert':178C 'also':176C 'associ':185C 'attack':64B 'avail':60B 'bug':52B,116C,167C 'capac':113C,123C,143C,157C,165C,188C 'capacity-select':164C 'ci':19B 'comput':112C 'correct':154C 'creat':129C 'creation':56B,136C,183C 'custom':8A,79C 'delay':37B 'expans':109C 'experienc':85C 'expos':114C 'failur':171C,184C 'fix':161C 'git':20B 'github':1A,16A,18A,21B,23B,31B,81C 'github-act':22B 'handl':122C 'inc':15A 'inc-github-kzh5j0mt7qwc':14A 'incid':25B,61B 'insuffici':141C 'involv':66B 'issu':189C 'job':5A,35B,93C,104C,147C 'kzh5j0mt7qwc':17A 'larger':3A,27B,33B,83C,102C 'larger-runn':26B,101C 'leav':140C 'longer':87C 'longer-than-norm':86C 'machin':132C 'may':9A 'new':138C 'normal':89C,151C 'period':98C 'prevent':169C 'prompt':148C 'provis':51B,120C,152C 'record':124C,158C,182C 'recur':173C 'restor':150C 'routin':108C 'runner':4A,28B,34B,54B,84C,103C,130C,139C,142C 'secur':29B 'select':126C,166C 'septemb':46B,68C 'slow':11A,53B,134C 'start':13A,95C,145C 'system':121C 'time':91C 'under':163C 'use':80C 'utc':44B,77C 'vendor':30B 'virtual':131C 'vm':55B,181C 'vm-record':180C 'wait':90C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2026-09-14T18:40:25+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"github:kzh5j0mt7qwc","url":"https://stspg.io/f2b6fd4l83wy","severity":"medium","published_at":"2026-09-14T18:40:25+00:00","modified_at":"2026-09-18T23:11:13+00:00","first_seen_at":"2026-10-23T19:12:22+00:00","fetched_at":"2026-10-25T16:40:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}