@cloudsnorkel/cdk-github-runners 0.1.0 → 0.3.0

package/.jsii

@@ -2971,7 +2971,7 @@
     "stability": "experimental"
   },
   "homepage": "https://github.com/CloudSnorkel/cdk-github-runners.git",
-  "jsiiVersion": "1.59.0 (build eb02c92)",
+  "jsiiVersion": "1.61.0 (build abf4039)",
   "keywords": [
     "aws",
     "aws-cdk",
@@ -2995,7 +2995,7 @@
   },
   "name": "@cloudsnorkel/cdk-github-runners",
   "readme": {
-    "markdown": "# GitHub Self-Hosted Runners CDK Constructs\n\n[![NPM](https://img.shields.io/npm/v/@cloudsnorkel/cdk-github-runners?label=npm&logo=npm)][6]\n[![PyPI](https://img.shields.io/pypi/v/cloudsnorkel.cdk-github-runners?label=pypi&logo=pypi)][7]\n[![Maven Central](https://img.shields.io/maven-central/v/com.cloudsnorkel/cdk.github.runners.svg?label=Maven%20Central&logo=java)][8]\n[![Go](https://img.shields.io/github/v/tag/CloudSnorkel/cdk-github-runners?color=red&label=go&logo=go)][11]\n[![Nuget](https://img.shields.io/nuget/v/CloudSnorkel.Cdk.Github.Runners?color=red&&logo=nuget)][12]\n[![Release](https://github.com/CloudSnorkel/cdk-github-runners/actions/workflows/release.yml/badge.svg)](https://github.com/CloudSnorkel/cdk-github-runners/actions/workflows/release.yml)\n[![License](https://img.shields.io/badge/license-Apache--2.0-blue)](https://github.com/CloudSnorkel/cdk-github-runners/blob/main/LICENSE)\n\nUse this CDK construct to create ephemeral [self-hosted GitHub runners][1] on-demand inside your AWS account.\n\n* Easy to configure GitHub integration\n* Customizable runners with decent defaults\n* Supports multiple runner configurations controlled by labels\n* Everything fully hosted in your account\n\nSelf-hosted runners in AWS are useful when:\n\n* You need easy access to internal resources in your actions\n* You want to pre-install some software for your actions\n* You want to provide some basic AWS API access ([aws-actions/configure-aws-credentials][2] has more security controls)\n\nEphemeral runners are the [recommended way by GitHub][14] for auto-scaling, and they make sure all jobs run with a clean image. Runners are started on-demand. You don't pay unless a job is running.\n\n## API\n\nDocumentation of available constructs and their interface is available on [Constructs Hub][13] in all supported programming languages.\n\n## Providers\n\nA runner provider creates compute resources on-demand and uses [actions/runner][5] to start a runner.\n\n| Provider  | Time limit               | vCPUs                    | RAM                               | Storage                      | sudo | Docker |\n|-----------|--------------------------|--------------------------|-----------------------------------|------------------------------|------|--------|\n| CodeBuild | 8 hours (default 1 hour) | 2 (default), 4, 8, or 72 | 3gb (default), 7gb, 15gb or 145gb | 50gb to 824gb (default 64gb) | ✔    | ✔     |\n| Fargate   | Unlimited                | 0.25 to 4 (default 1)    | 512mb to 30gb (default 2gb)       | 20gb to 200gb (default 25gb) | ✔    | ❌    |\n| Lambda    | 15 minutes               | 1 to 6 (default 2)       | 128mb to 10gb (default 2gb)       | Up to 10gb (default 10gb)    | ❌    | ❌     |\n\nThe best provider to use mostly depends on your current infrastructure. When in doubt, CodeBuild is always a good choice. Execution history and logs are easy to view, and it has no restrictive limits unless you need to run for more than 8 hours.\n\nYou can also create your own provider by implementing `IRunnerProvider`.\n\n## Installation\n\n1. Confirm you're using CDK v2\n2. Install the appropriate package\n   1. [Python][6]\n      ```\n      pip install cloudsnorkel.cdk-github-runners\n      ```\n   2. [TypeScript or JavaScript][7]\n      ```\n      npm i @cloudsnorkel/cdk-github-runners\n      ```\n   3. [Java][8]\n      ```xml\n      <dependency>\n      <groupId>com.cloudsnorkel</groupId>\n      <artifactId>cdk.github.runners</artifactId>\n      </dependency>\n      ```\n   4. [Go][11]\n      ```\n      go get github.com/CloudSnorkel/cdk-github-runners-go/cloudsnorkelcdkgithubrunners\n      ```\n   5. [.NET][12]\n      ```\n      dotnet add package CloudSnorkel.Cdk.Github.Runners\n      ```\n3. Use `GitHubRunners` construct in your code (starting with default arguments is fine)\n4. Deploy your stack\n5. Look for the status command output similar to `aws --region us-east-1 lambda invoke --function-name status-XYZ123 status.json`\n6. Execute the status command (you may need to specify `--profile` too) and open the resulting `status.json` file\n7. [Setup GitHub](SETUP_GITHUB.md) integration as an app or with personal access token\n8. Run status command again to confirm `github.auth.status` and `github.webhook.status` are OK\n9. Trigger a GitHub action that has a `self-hosted` label with `runs-on: [self-hosted, linux, codebuild]` or similar\n10. If the action is not successful, see [troubleshooting](#Troubleshooting)\n\n## Customizing\n\nThe default providers configured by [`GitHubRunners`](https://constructs.dev/packages/@cloudsnorkel/cdk-github-runners/v/0.0.11/api/GitHubRunners?lang=typescript) are useful for testing but probably not too much for actual production work. They run in the default VPC or no VPC and have no added IAM permissions. You would usually want to configure the providers yourself.\n\nFor example:\n\n```typescript\nimport * as cdk from 'aws-cdk-lib';\nimport { aws_ec2 as ec2, aws_s3 as s3 } from 'aws-cdk-lib';\nimport { GitHubRunners, CodeBuildRunner } from '@cloudsnorkel/cdk-github-runners';\n\nconst app = new cdk.App();\nconst stack = new cdk.Stack(\n  app,\n  'github-runners-test',\n  {\n     env: {\n        account: process.env.CDK_DEFAULT_ACCOUNT,\n        region: process.env.CDK_DEFAULT_REGION,\n     },\n  },\n);\n\nconst vpc = ec2.Vpc.fromLookup(stack, 'vpc', { vpcId: 'vpc-1234567' });\nconst runnerSg = new ec2.SecurityGroup(stack, 'runner security group', { vpc: vpc });\nconst dbSg = ec2.SecurityGroup.fromSecurityGroupId(stack, 'database security group', 'sg-1234567');\nconst bucket = new s3.Bucket(stack, 'runner bucket');\n\n// create a custom CodeBuild provider\nconst myProvider = new CodeBuildRunner(\n  stack, 'codebuild runner',\n  {\n     label: 'my-codebuild',\n     vpc: vpc,\n     securityGroup: runnerSg,\n  },\n);\n// grant some permissions to the provider\nbucket.grantReadWrite(myProvider);\ndbSg.connections.allowFrom(runnerSg, ec2.Port.tcp(3306), 'allow runners to connect to MySQL database');\n\n// create the runner infrastructure\nnew GitHubRunners(\n  stack,\n  'runners',\n  {\n    providers: [myProvider],\n    defaultProviderLabel: 'my-codebuild',\n  }\n);\n\napp.synth();\n```\n\n## Architecture\n\n![Architecture diagram](architecture.svg)\n\n## Troubleshooting\n\n1. Always start with the status function, make sure no errors are reported, and confirm all status codes are OK\n2. Confirm the webhook Lambda was called by visiting the URL in `troubleshooting.webhookHandlerUrl` from `status.json`\n   1. If it's not called or logs errors, confirm the webhook settings on the GitHub side\n   2. If you see too many errors, make sure you're only sending `workflow_job` events\n3. When using GitHub app, make sure there are active installation in `github.auth.app.installations`\n4. Check execution details of the orchestrator step function by visiting the URL in `troubleshooting.stepFunctionUrl` from `status.json`\n   1. Use the details tab to find the specific execution of the provider (Lambda, CodeBuild, Fargate, etc.)\n   2. Every step function execution should be successful, even if the runner action inside it failed\n\n## Other Options\n\n1. [philips-labs/terraform-aws-github-runner][3] if you're using Terraform\n2. [actions-runner-controller/actions-runner-controller][4] if you're using Kubernetes\n\n\n[1]: https://docs.github.com/en/actions/hosting-your-own-runners/about-self-hosted-runners\n[2]: https://github.com/marketplace/actions/configure-aws-credentials-action-for-github-actions\n[3]: https://github.com/philips-labs/terraform-aws-github-runner\n[4]: https://github.com/actions-runner-controller/actions-runner-controller\n[5]: https://github.com/actions/runner\n[6]: https://www.npmjs.com/package/@cloudsnorkel/cdk-github-runners\n[7]: https://pypi.org/project/cloudsnorkel.cdk-github-runners\n[8]: https://search.maven.org/search?q=g:%22com.cloudsnorkel%22%20AND%20a:%22cdk.github.runners%22\n[9]: https://docs.github.com/en/developers/apps/getting-started-with-apps/about-apps\n[10]: https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token\n[11]: https://pkg.go.dev/github.com/CloudSnorkel/cdk-github-runners-go/cloudsnorkelcdkgithubrunners\n[12]: https://www.nuget.org/packages/CloudSnorkel.Cdk.Github.Runners/\n[13]: https://constructs.dev/packages/@cloudsnorkel/cdk-github-runners/\n[14]: https://docs.github.com/en/actions/hosting-your-own-runners/autoscaling-with-self-hosted-runners#using-ephemeral-runners-for-autoscaling"
+    "markdown": "# GitHub Self-Hosted Runners CDK Constructs\n\n[![NPM](https://img.shields.io/npm/v/@cloudsnorkel/cdk-github-runners?label=npm&logo=npm)][6]\n[![PyPI](https://img.shields.io/pypi/v/cloudsnorkel.cdk-github-runners?label=pypi&logo=pypi)][7]\n[![Maven Central](https://img.shields.io/maven-central/v/com.cloudsnorkel/cdk.github.runners.svg?label=Maven%20Central&logo=java)][8]\n[![Go](https://img.shields.io/github/v/tag/CloudSnorkel/cdk-github-runners?color=red&label=go&logo=go)][11]\n[![Nuget](https://img.shields.io/nuget/v/CloudSnorkel.Cdk.Github.Runners?color=red&&logo=nuget)][12]\n[![Release](https://github.com/CloudSnorkel/cdk-github-runners/actions/workflows/release.yml/badge.svg)](https://github.com/CloudSnorkel/cdk-github-runners/actions/workflows/release.yml)\n[![License](https://img.shields.io/badge/license-Apache--2.0-blue)](https://github.com/CloudSnorkel/cdk-github-runners/blob/main/LICENSE)\n\nUse this CDK construct to create ephemeral [self-hosted GitHub runners][1] on-demand inside your AWS account.\n\n* Easy to configure GitHub integration with a web-based interface\n* Customizable runners with decent defaults\n* Multiple runner configurations controlled by labels\n* Everything fully hosted in your account\n\nSelf-hosted runners in AWS are useful when:\n\n* You need easy access to internal resources in your actions\n* You want to pre-install some software for your actions\n* You want to provide some basic AWS API access (but [aws-actions/configure-aws-credentials][2] has more security controls)\n\nEphemeral (or on-demand) runners are the [recommended way by GitHub][14] for auto-scaling, and they make sure all jobs run with a clean image. Runners are started on-demand. You don't pay unless a job is running.\n\n## API\n\nThe best way to browse API documentation is on [Constructs Hub][13]. It is available in all supported programming languages.\n\n## Providers\n\nA runner provider creates compute resources on-demand and uses [actions/runner][5] to start a runner.\n\n|                  | CodeBuild                | Fargate        | Lambda         |\n|------------------|--------------------------|----------------|----------------|\n| **Time limit**   | 8 hours                  | Unlimited      | 15 minutes     |\n| **vCPUs**        | 2, 4, 8, or 72           | 0.25 to 4      | 1 to 6         |\n| **RAM**          | 3gb, 7gb, 15gb, or 145gb | 512mb to 30gb  | 128mb to 10gb  |\n| **Storage**      | 50gb to 824gb            | 20gb to 200gb  | Up to 10gb     |\n| **Architecture** | x86_64, ARM64            | x86_64, ARM64  | x86_64, ARM64  |\n| **sudo**         | ✔                        | ✔              | ❌              |\n| **Docker**       | ✔                        | ❌              | ❌              |\n| **Spot pricing** | ❌                        | ✔              | ❌              |\n\nThe best provider to use mostly depends on your current infrastructure. When in doubt, CodeBuild is always a good choice. Execution history and logs are easy to view, and it has no restrictive limits unless you need to run for more than 8 hours.\n\nYou can also create your own provider by implementing `IRunnerProvider`.\n\n## Installation\n\n1. Confirm you're using CDK v2\n2. Install the appropriate package\n   1. [Python][6]\n      ```\n      pip install cloudsnorkel.cdk-github-runners\n      ```\n   2. [TypeScript or JavaScript][7]\n      ```\n      npm i @cloudsnorkel/cdk-github-runners\n      ```\n   3. [Java][8]\n      ```xml\n      <dependency>\n      <groupId>com.cloudsnorkel</groupId>\n      <artifactId>cdk.github.runners</artifactId>\n      </dependency>\n      ```\n   4. [Go][11]\n      ```\n      go get github.com/CloudSnorkel/cdk-github-runners-go/cloudsnorkelcdkgithubrunners\n      ```\n   5. [.NET][12]\n      ```\n      dotnet add package CloudSnorkel.Cdk.Github.Runners\n      ```\n3. Use `GitHubRunners` construct in your code (starting with default arguments is fine)\n4. Deploy your stack\n5. Look for the status command output similar to `aws --region us-east-1 lambda invoke --function-name status-XYZ123 status.json`\n6. Execute the status command (you may need to specify `--profile` too) and open the resulting `status.json` file\n7. Open the URL in `github.setup.url` from `status.json` or [manually setup GitHub](SETUP_GITHUB.md) integration as an app or with personal access token\n8. Run status command again to confirm `github.auth.status` and `github.webhook.status` are OK\n9. Trigger a GitHub action that has a `self-hosted` label with `runs-on: [self-hosted, linux, codebuild]` or similar\n10. If the action is not successful, see [troubleshooting](#Troubleshooting)\n\n[![Demo](demo-thumbnail.jpg)](https://youtu.be/wlyv_3V8lIw)\n\n## Customizing\n\nThe default providers configured by `GitHubRunners` are useful for testing but probably not too much for actual production work. They run in the default VPC or no VPC and have no added IAM permissions. You would usually want to configure the providers yourself.\n\nFor example:\n\n```typescript\nlet vpc: ec2.Vpc;\nlet runnerSg: ec2.SecurityGroup;\nlet dbSg: ec2.SecurityGroup;\nlet bucket: s3.Bucket;\n\n// create a custom CodeBuild provider\nconst myProvider = new CodeBuildRunner(this, 'codebuild runner', {\n    label: 'my-codebuild',\n    vpc: vpc,\n    securityGroup: runnerSg,\n});\n// grant some permissions to the provider\nbucket.grantReadWrite(myProvider);\ndbSg.connections.allowFrom(runnerSg, ec2.Port.tcp(3306), 'allow runners to connect to MySQL database');\n\n// create the runner infrastructure\nnew GitHubRunners(this, 'runners', {\n    providers: [myProvider],\n});\n```\n\nAnother way to customize runners is by modifying the image used to spin them up. The image contains the [runner][5], any required dependencies, and integration code with the provider. You may choose to customize this image by adding more packages, for example.\n\n```typescript\nconst myBuilder = new CodeBuildImageBuilder(this, 'image builder', {\n   dockerfilePath: FargateProvider.LINUX_X64_DOCKERFILE_PATH,\n   runnerVersion: RunnerVersion.specific('2.291.0'),\n   rebuildInterval: Duration.days(14),\n});\nmyBuilder.setBuildArg('EXTRA_PACKAGES', 'nginx xz-utils');\n\nconst myProvider = new FargateProvider(this, 'fargate runner', {\n   label: 'my-codebuild',\n   vpc: vpc,\n   securityGroup: runnerSg,\n});\n\n// create the runner infrastructure\nnew GitHubRunners(stack, 'runners', {\n   providers: [myProvider],\n});\n```\n\nYour workflow will then look like:\n\n```yaml\nname: self-hosted example\non: push\njobs:\n  self-hosted:\n    runs-on: [self-hosted, my-codebuild]\n    steps:\n      - run: echo hello world\n```\n\n## Architecture\n\n![Architecture diagram](architecture.svg)\n\n## Troubleshooting\n\n1. Always start with the status function, make sure no errors are reported, and confirm all status codes are OK\n2. Confirm the webhook Lambda was called by visiting the URL in `troubleshooting.webhookHandlerUrl` from `status.json`\n   1. If it's not called or logs errors, confirm the webhook settings on the GitHub side\n   2. If you see too many errors, make sure you're only sending `workflow_job` events\n3. When using GitHub app, make sure there are active installation in `github.auth.app.installations`\n4. Check execution details of the orchestrator step function by visiting the URL in `troubleshooting.stepFunctionUrl` from `status.json`\n   1. Use the details tab to find the specific execution of the provider (Lambda, CodeBuild, Fargate, etc.)\n   2. Every step function execution should be successful, even if the runner action inside it failed\n\n## Other Options\n\n1. [philips-labs/terraform-aws-github-runner][3] if you're using Terraform\n2. [actions-runner-controller/actions-runner-controller][4] if you're using Kubernetes\n\n\n[1]: https://docs.github.com/en/actions/hosting-your-own-runners/about-self-hosted-runners\n[2]: https://github.com/marketplace/actions/configure-aws-credentials-action-for-github-actions\n[3]: https://github.com/philips-labs/terraform-aws-github-runner\n[4]: https://github.com/actions-runner-controller/actions-runner-controller\n[5]: https://github.com/actions/runner\n[6]: https://www.npmjs.com/package/@cloudsnorkel/cdk-github-runners\n[7]: https://pypi.org/project/cloudsnorkel.cdk-github-runners\n[8]: https://search.maven.org/search?q=g:%22com.cloudsnorkel%22%20AND%20a:%22cdk.github.runners%22\n[9]: https://docs.github.com/en/developers/apps/getting-started-with-apps/about-apps\n[10]: https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token\n[11]: https://pkg.go.dev/github.com/CloudSnorkel/cdk-github-runners-go/cloudsnorkelcdkgithubrunners\n[12]: https://www.nuget.org/packages/CloudSnorkel.Cdk.Github.Runners/\n[13]: https://constructs.dev/packages/@cloudsnorkel/cdk-github-runners/\n[14]: https://docs.github.com/en/actions/hosting-your-own-runners/autoscaling-with-self-hosted-runners#using-ephemeral-runners-for-autoscaling"
   },
   "repository": {
     "type": "git",
@@ -3026,22 +3026,116 @@
     }
   },
   "types": {
-    "@cloudsnorkel/cdk-github-runners.CodeBuildRunner": {
+    "@cloudsnorkel/cdk-github-runners.Architecture": {
+      "assembly": "@cloudsnorkel/cdk-github-runners",
+      "docs": {
+        "stability": "experimental",
+        "summary": "CPU architecture enum for an image."
+      },
+      "fqn": "@cloudsnorkel/cdk-github-runners.Architecture",
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/providers/common.ts",
+        "line": 32
+      },
+      "methods": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Checks if the given architecture is the same as this one."
+          },
+          "locationInModule": {
+            "filename": "src/providers/common.ts",
+            "line": 55
+          },
+          "name": "is",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "architecture to compare."
+              },
+              "name": "arch",
+              "type": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.Architecture"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "primitive": "boolean"
+            }
+          }
+        }
+      ],
+      "name": "Architecture",
+      "properties": [
+        {
+          "const": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "ARM64."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/common.ts",
+            "line": 36
+          },
+          "name": "ARM64",
+          "static": true,
+          "type": {
+            "fqn": "@cloudsnorkel/cdk-github-runners.Architecture"
+          }
+        },
+        {
+          "const": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "X86_64."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/common.ts",
+            "line": 41
+          },
+          "name": "X86_64",
+          "static": true,
+          "type": {
+            "fqn": "@cloudsnorkel/cdk-github-runners.Architecture"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/common.ts",
+            "line": 47
+          },
+          "name": "name",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "src/providers/common:Architecture"
+    },
+    "@cloudsnorkel/cdk-github-runners.CodeBuildImageBuilder": {
       "assembly": "@cloudsnorkel/cdk-github-runners",
       "base": "constructs.Construct",
       "docs": {
-        "remarks": "Creates a project that gets started for each job.\n\nThis construct is not meant to be used by itself. It should be passed in the providers property for GitHubRunners.",
+        "remarks": "Builders can be used with runner providers.\n\nEach builder re-runs automatically at a set interval to make sure the images contain the latest versions of everything.\n\nYou can create an instance of this construct to customize the image used to spin-up runners. Each provider has its own requirements for what an image should do. That's why they each provide their own Dockerfile.\n\nFor example, to set a specific runner version, rebuild the image every 2 weeks, and add a few packages for the Fargate provider, use:\n\n```\nconst builder = new CodeBuildImageBuilder(this, 'Builder', {\n     dockerfilePath: FargateProvider.LINUX_X64_DOCKERFILE_PATH,\n     runnerVersion: RunnerVersion.specific('2.293.0'),\n     rebuildInterval: Duration.days(14),\n});\nbuilder.setBuildArg('EXTRA_PACKAGES', 'nginx xz-utils');\nnew FargateProvider(this, 'Fargate provider', {\n     label: 'customized-fargate',\n     imageBuilder: builder,\n});\n```",
         "stability": "experimental",
-        "summary": "GitHub Actions runner provider using CodeBuild to execute the actions."
+        "summary": "An image builder that uses CodeBuild to build Docker images pre-baked with all the GitHub Actions runner requirements."
       },
-      "fqn": "@cloudsnorkel/cdk-github-runners.CodeBuildRunner",
+      "fqn": "@cloudsnorkel/cdk-github-runners.CodeBuildImageBuilder",
       "initializer": {
         "docs": {
           "stability": "experimental"
         },
         "locationInModule": {
-          "filename": "src/providers/codebuild.ts",
-          "line": 97
+          "filename": "src/providers/image-builders/codebuild.ts",
+          "line": 164
         },
         "parameters": [
           {
@@ -3059,298 +3153,440 @@
           {
             "name": "props",
             "type": {
-              "fqn": "@cloudsnorkel/cdk-github-runners.CodeBuildRunnerProps"
+              "fqn": "@cloudsnorkel/cdk-github-runners.CodeBuildImageBuilderProps"
             }
           }
         ]
       },
       "interfaces": [
-        "@cloudsnorkel/cdk-github-runners.IRunnerProvider"
+        "@cloudsnorkel/cdk-github-runners.IImageBuilder"
       ],
       "kind": "class",
       "locationInModule": {
-        "filename": "src/providers/codebuild.ts",
-        "line": 71
+        "filename": "src/providers/image-builders/codebuild.ts",
+        "line": 149
       },
       "methods": [
         {
           "docs": {
-            "remarks": "Called by GithubRunners and shouldn't be called manually.",
             "stability": "experimental",
-            "summary": "Generate step function task(s) to start a new runner."
+            "summary": "Uploads a folder to the build server at a given folder name."
           },
           "locationInModule": {
-            "filename": "src/providers/codebuild.ts",
-            "line": 175
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 205
           },
-          "name": "getStepFunctionTask",
-          "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
+          "name": "addFiles",
           "parameters": [
             {
               "docs": {
-                "summary": "workflow job details."
+                "summary": "path to source directory."
               },
-              "name": "parameters",
+              "name": "sourcePath",
               "type": {
-                "fqn": "@cloudsnorkel/cdk-github-runners.RunnerRuntimeParameters"
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "name of destination folder."
+              },
+              "name": "destName",
+              "type": {
+                "primitive": "string"
               }
             }
-          ],
-          "returns": {
-            "type": {
-              "fqn": "aws-cdk-lib.aws_stepfunctions.IChainable"
-            }
-          }
-        }
-      ],
-      "name": "CodeBuildRunner",
-      "properties": [
+          ]
+        },
         {
           "docs": {
             "stability": "experimental",
-            "summary": "The network connections associated with this resource."
+            "summary": "Add a policy statement to the builder to access resources required to the image build."
           },
-          "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/codebuild.ts",
-            "line": 215
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 257
           },
-          "name": "connections",
-          "overrides": "aws-cdk-lib.aws_ec2.IConnectable",
-          "type": {
-            "fqn": "aws-cdk-lib.aws_ec2.Connections"
-          }
+          "name": "addPolicyStatement",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "IAM policy statement."
+              },
+              "name": "statement",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.PolicyStatement"
+              }
+            }
+          ]
         },
         {
           "docs": {
             "stability": "experimental",
-            "summary": "Grant principal used to add permissions to the runner role."
+            "summary": "Adds a command that runs after `docker build` and `docker push`."
           },
-          "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/codebuild.ts",
-            "line": 95
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 232
           },
-          "name": "grantPrincipal",
-          "overrides": "aws-cdk-lib.aws_iam.IGrantable",
-          "type": {
-            "fqn": "aws-cdk-lib.aws_iam.IPrincipal"
-          }
+          "name": "addPostBuildCommand",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "command to add."
+              },
+              "name": "command",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
         },
         {
           "docs": {
             "stability": "experimental",
-            "summary": "Label associated with this provider."
+            "summary": "Adds a command that runs before `docker build`."
           },
-          "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/codebuild.ts",
-            "line": 80
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 220
           },
-          "name": "label",
-          "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
-          "type": {
-            "primitive": "string"
-          }
+          "name": "addPreBuildCommand",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "command to add."
+              },
+              "name": "command",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
         },
         {
           "docs": {
             "stability": "experimental",
-            "summary": "CodeBuild project hosting the runner."
+            "summary": "Called by IRunnerProvider to finalize settings and create the image builder."
           },
-          "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/codebuild.ts",
-            "line": 75
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 267
           },
-          "name": "project",
-          "type": {
-            "fqn": "aws-cdk-lib.aws_codebuild.Project"
+          "name": "bind",
+          "overrides": "@cloudsnorkel/cdk-github-runners.IImageBuilder",
+          "returns": {
+            "type": {
+              "fqn": "@cloudsnorkel/cdk-github-runners.RunnerImage"
+            }
           }
         },
         {
           "docs": {
+            "remarks": "See the documentation for the Dockerfile you're using for a list of supported build arguments.",
             "stability": "experimental",
-            "summary": "Security group attached to the task."
+            "summary": "Adds a build argument for Docker."
           },
-          "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/codebuild.ts",
-            "line": 90
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 245
           },
-          "name": "securityGroup",
-          "optional": true,
-          "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
-          "type": {
-            "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
-          }
-        },
+          "name": "setBuildArg",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "build argument name."
+              },
+              "name": "name",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "build argument value."
+              },
+              "name": "value",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
+        }
+      ],
+      "name": "CodeBuildImageBuilder",
+      "properties": [
         {
           "docs": {
-            "stability": "experimental",
-            "summary": "VPC used for hosting the project."
+            "stability": "experimental"
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/codebuild.ts",
-            "line": 85
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 164
           },
-          "name": "vpc",
-          "optional": true,
-          "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
+          "name": "props",
           "type": {
-            "fqn": "aws-cdk-lib.aws_ec2.IVpc"
+            "fqn": "@cloudsnorkel/cdk-github-runners.CodeBuildImageBuilderProps"
           }
         }
       ],
-      "symbolId": "src/providers/codebuild:CodeBuildRunner"
+      "symbolId": "src/providers/image-builders/codebuild:CodeBuildImageBuilder"
     },
-    "@cloudsnorkel/cdk-github-runners.CodeBuildRunnerProps": {
+    "@cloudsnorkel/cdk-github-runners.CodeBuildImageBuilderProps": {
       "assembly": "@cloudsnorkel/cdk-github-runners",
       "datatype": true,
       "docs": {
-        "stability": "experimental"
+        "stability": "experimental",
+        "summary": "Properties for CodeBuildImageBuilder construct."
       },
-      "fqn": "@cloudsnorkel/cdk-github-runners.CodeBuildRunnerProps",
-      "interfaces": [
-        "@cloudsnorkel/cdk-github-runners.RunnerProviderProps"
-      ],
+      "fqn": "@cloudsnorkel/cdk-github-runners.CodeBuildImageBuilderProps",
       "kind": "interface",
       "locationInModule": {
-        "filename": "src/providers/codebuild.ts",
-        "line": 17
+        "filename": "src/providers/image-builders/codebuild.ts",
+        "line": 34
       },
-      "name": "CodeBuildRunnerProps",
+      "name": "CodeBuildImageBuilderProps",
       "properties": [
         {
           "abstract": true,
           "docs": {
-            "default": "{@link ComputeType#SMALL}",
-            "remarks": "See the {@link ComputeType} enum for the possible values.",
+            "remarks": "It can be a path to a Dockerfile, a folder containing a Dockerfile, or a zip file containing a Dockerfile.",
             "stability": "experimental",
-            "summary": "The type of compute to use for this build."
+            "summary": "Path to Dockerfile to be built."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/codebuild.ts",
+            "filename": "src/providers/image-builders/codebuild.ts",
             "line": 52
           },
-          "name": "computeType",
-          "optional": true,
+          "name": "dockerfilePath",
           "type": {
-            "fqn": "aws-cdk-lib.aws_codebuild.ComputeType"
+            "primitive": "string"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "'codebuild'",
+            "default": "Architecture.X86_64",
             "stability": "experimental",
-            "summary": "GitHub Actions label used for this provider."
+            "summary": "Image architecture."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/codebuild.ts",
-            "line": 23
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 40
           },
-          "name": "label",
+          "name": "architecture",
           "optional": true,
           "type": {
-            "primitive": "string"
+            "fqn": "@cloudsnorkel/cdk-github-runners.Architecture"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "public project with no security group",
+            "default": "{@link ComputeType#SMALL}",
+            "remarks": "See the {@link ComputeType} enum for the possible values.",
             "stability": "experimental",
-            "summary": "Security Group to assign to this instance."
+            "summary": "The type of compute to use for this build."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/codebuild.ts",
-            "line": 37
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 97
           },
-          "name": "securityGroup",
+          "name": "computeType",
           "optional": true,
           "type": {
-            "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
+            "fqn": "aws-cdk-lib.aws_codebuild.ComputeType"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "no subnet",
+            "default": "RemovalPolicy.DESTROY",
+            "remarks": "If deployment fails on the custom resource, try setting this to `RemovalPolicy.RETAIN`. This way the CodeBuild logs can still be viewed, and you can see why the build failed.\n\nWe try to not leave anything behind when removed. But sometimes a log staying behind is useful.",
             "stability": "experimental",
-            "summary": "Where to place the network interfaces within the VPC."
+            "summary": "Removal policy for logs of image builds."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/codebuild.ts",
-            "line": 44
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 124
           },
-          "name": "subnetSelection",
+          "name": "logRemovalPolicy",
           "optional": true,
           "type": {
-            "fqn": "aws-cdk-lib.aws_ec2.SubnetSelection"
+            "fqn": "aws-cdk-lib.RemovalPolicy"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "Duration.hours(1)",
-            "remarks": "For valid values, see the timeoutInMinutes field in the AWS\nCodeBuild User Guide.",
+            "default": "logs.RetentionDays.ONE_MONTH",
+            "remarks": "When updating\nthis property, unsetting it doesn't remove the log retention policy. To\nremove the retention policy, set the value to `INFINITE`.",
             "stability": "experimental",
-            "summary": "The number of minutes after which AWS CodeBuild stops the build if it's not complete."
+            "summary": "The number of days log events are kept in CloudWatch Logs."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/codebuild.ts",
-            "line": 61
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 115
           },
-          "name": "timeout",
+          "name": "logRetention",
           "optional": true,
           "type": {
-            "fqn": "aws-cdk-lib.Duration"
+            "fqn": "aws-cdk-lib.aws_logs.RetentionDays"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "no VPC",
+            "default": "OS.LINUX",
             "stability": "experimental",
-            "summary": "VPC to launch the runners in."
+            "summary": "Image OS."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/codebuild.ts",
-            "line": 30
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 47
           },
-          "name": "vpc",
+          "name": "os",
           "optional": true,
           "type": {
-            "fqn": "aws-cdk-lib.aws_ec2.IVpc"
+            "fqn": "@cloudsnorkel/cdk-github-runners.Os"
           }
-        }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "Duration.days(7)",
+            "remarks": "Useful for keeping the image up-do-date with the latest GitHub runner version and latest OS updates.\n\nSet to zero to disable.",
+            "stability": "experimental",
+            "summary": "Schedule the image to be rebuilt every given interval."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 68
+          },
+          "name": "rebuildInterval",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.Duration"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "latest version available",
+            "stability": "experimental",
+            "summary": "Version of GitHub Runners to install."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 59
+          },
+          "name": "runnerVersion",
+          "optional": true,
+          "type": {
+            "fqn": "@cloudsnorkel/cdk-github-runners.RunnerVersion"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "public project with no security group",
+            "stability": "experimental",
+            "summary": "Security Group to assign to this instance."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 82
+          },
+          "name": "securityGroup",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "no subnet",
+            "stability": "experimental",
+            "summary": "Where to place the network interfaces within the VPC."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 89
+          },
+          "name": "subnetSelection",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.SubnetSelection"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "Duration.hours(1)",
+            "remarks": "For valid values, see the timeoutInMinutes field in the AWS\nCodeBuild User Guide.",
+            "stability": "experimental",
+            "summary": "The number of minutes after which AWS CodeBuild stops the build if it's not complete."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 106
+          },
+          "name": "timeout",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.Duration"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "no VPC",
+            "stability": "experimental",
+            "summary": "VPC to launch the runners in."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 75
+          },
+          "name": "vpc",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.IVpc"
+          }
+        }
       ],
-      "symbolId": "src/providers/codebuild:CodeBuildRunnerProps"
+      "symbolId": "src/providers/image-builders/codebuild:CodeBuildImageBuilderProps"
     },
-    "@cloudsnorkel/cdk-github-runners.FargateRunner": {
+    "@cloudsnorkel/cdk-github-runners.CodeBuildRunner": {
       "assembly": "@cloudsnorkel/cdk-github-runners",
       "base": "constructs.Construct",
       "docs": {
-        "remarks": "Creates a task definition with a single container that gets started for each job.\n\nThis construct is not meant to be used by itself. It should be passed in the providers property for GitHubRunners.",
+        "remarks": "Creates a project that gets started for each job.\n\nThis construct is not meant to be used by itself. It should be passed in the providers property for GitHubRunners.",
         "stability": "experimental",
-        "summary": "GitHub Actions runner provider using Fargate to execute the actions."
+        "summary": "GitHub Actions runner provider using CodeBuild to execute the actions."
       },
-      "fqn": "@cloudsnorkel/cdk-github-runners.FargateRunner",
+      "fqn": "@cloudsnorkel/cdk-github-runners.CodeBuildRunner",
       "initializer": {
         "docs": {
           "stability": "experimental"
         },
         "locationInModule": {
-          "filename": "src/providers/fargate.ts",
-          "line": 155
+          "filename": "src/providers/codebuild.ts",
+          "line": 133
         },
         "parameters": [
           {
@@ -3368,7 +3604,7 @@
           {
             "name": "props",
             "type": {
-              "fqn": "@cloudsnorkel/cdk-github-runners.FargateRunnerProps"
+              "fqn": "@cloudsnorkel/cdk-github-runners.CodeBuildRunnerProps"
             }
           }
         ]
@@ -3378,8 +3614,8 @@
       ],
       "kind": "class",
       "locationInModule": {
-        "filename": "src/providers/fargate.ts",
-        "line": 109
+        "filename": "src/providers/codebuild.ts",
+        "line": 81
       },
       "methods": [
         {
@@ -3389,8 +3625,8 @@
             "summary": "Generate step function task(s) to start a new runner."
           },
           "locationInModule": {
-            "filename": "src/providers/fargate.ts",
-            "line": 209
+            "filename": "src/providers/codebuild.ts",
+            "line": 233
           },
           "name": "getStepFunctionTask",
           "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
@@ -3412,36 +3648,42 @@
           }
         }
       ],
-      "name": "FargateRunner",
+      "name": "CodeBuildRunner",
       "properties": [
         {
+          "const": true,
           "docs": {
+            "remarks": "Use this Dockerfile unless you need to customize it further than allowed by hooks.\n\nAvailable build arguments that can be set in the image builder:\n* `BASE_IMAGE` sets the `FROM` line. This should be an Ubuntu compatible image.\n* `EXTRA_PACKAGES` can be used to install additional packages.\n* `DOCKER_CHANNEL` overrides the channel from which Docker will be downloaded. Defaults to `\"stsable\"`.\n* `DIND_COMMIT` overrides the commit where dind is found.\n* `DOCKER_VERSION` overrides the installed Docker version.\n* `DOCKER_COMPOSE_VERSION` overrides the installed docker-compose version.",
             "stability": "experimental",
-            "summary": "Whether task will have a public IP."
+            "summary": "Path to Dockerfile for Linux ARM64 with all the requirements for CodeBuild runner."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/fargate.ts",
-            "line": 143
+            "filename": "src/providers/codebuild.ts",
+            "line": 106
           },
-          "name": "assignPublicIp",
+          "name": "LINUX_ARM64_DOCKERFILE_PATH",
+          "static": true,
           "type": {
-            "primitive": "boolean"
+            "primitive": "string"
           }
         },
         {
+          "const": true,
           "docs": {
+            "remarks": "Use this Dockerfile unless you need to customize it further than allowed by hooks.\n\nAvailable build arguments that can be set in the image builder:\n* `BASE_IMAGE` sets the `FROM` line. This should be an Ubuntu compatible image.\n* `EXTRA_PACKAGES` can be used to install additional packages.\n* `DOCKER_CHANNEL` overrides the channel from which Docker will be downloaded. Defaults to `\"stsable\"`.\n* `DIND_COMMIT` overrides the commit where dind is found.\n* `DOCKER_VERSION` overrides the installed Docker version.\n* `DOCKER_COMPOSE_VERSION` overrides the installed docker-compose version.",
             "stability": "experimental",
-            "summary": "Cluster hosting the task hosting the runner."
+            "summary": "Path to Dockerfile for Linux x64 with all the requirements for CodeBuild runner."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/fargate.ts",
-            "line": 113
+            "filename": "src/providers/codebuild.ts",
+            "line": 93
           },
-          "name": "cluster",
+          "name": "LINUX_X64_DOCKERFILE_PATH",
+          "static": true,
           "type": {
-            "fqn": "aws-cdk-lib.aws_ecs.Cluster"
+            "primitive": "string"
           }
         },
         {
@@ -3451,8 +3693,8 @@
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/fargate.ts",
-            "line": 153
+            "filename": "src/providers/codebuild.ts",
+            "line": 273
           },
           "name": "connections",
           "overrides": "aws-cdk-lib.aws_ec2.IConnectable",
@@ -3460,21 +3702,6 @@
             "fqn": "aws-cdk-lib.aws_ec2.Connections"
           }
         },
-        {
-          "docs": {
-            "stability": "experimental",
-            "summary": "Container definition hosting the runner."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/providers/fargate.ts",
-            "line": 123
-          },
-          "name": "container",
-          "type": {
-            "fqn": "aws-cdk-lib.aws_ecs.ContainerDefinition"
-          }
-        },
         {
           "docs": {
             "stability": "experimental",
@@ -3482,8 +3709,8 @@
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/fargate.ts",
-            "line": 148
+            "filename": "src/providers/codebuild.ts",
+            "line": 131
           },
           "name": "grantPrincipal",
           "overrides": "aws-cdk-lib.aws_iam.IGrantable",
@@ -3498,8 +3725,8 @@
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/fargate.ts",
-            "line": 128
+            "filename": "src/providers/codebuild.ts",
+            "line": 116
           },
           "name": "label",
           "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
@@ -3510,16 +3737,16 @@
         {
           "docs": {
             "stability": "experimental",
-            "summary": "Fargate task hosting the runner."
+            "summary": "CodeBuild project hosting the runner."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/fargate.ts",
-            "line": 118
+            "filename": "src/providers/codebuild.ts",
+            "line": 111
           },
-          "name": "task",
+          "name": "project",
           "type": {
-            "fqn": "aws-cdk-lib.aws_ecs.FargateTaskDefinition"
+            "fqn": "aws-cdk-lib.aws_codebuild.Project"
           }
         },
         {
@@ -3529,8 +3756,8 @@
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/fargate.ts",
-            "line": 138
+            "filename": "src/providers/codebuild.ts",
+            "line": 126
           },
           "name": "securityGroup",
           "optional": true,
@@ -3542,12 +3769,12 @@
         {
           "docs": {
             "stability": "experimental",
-            "summary": "VPC used for hosting the task."
+            "summary": "VPC used for hosting the project."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/fargate.ts",
-            "line": 133
+            "filename": "src/providers/codebuild.ts",
+            "line": 121
           },
           "name": "vpc",
           "optional": true,
@@ -3557,193 +3784,173 @@
           }
         }
       ],
-      "symbolId": "src/providers/fargate:FargateRunner"
+      "symbolId": "src/providers/codebuild:CodeBuildRunner"
     },
-    "@cloudsnorkel/cdk-github-runners.FargateRunnerProps": {
+    "@cloudsnorkel/cdk-github-runners.CodeBuildRunnerProps": {
       "assembly": "@cloudsnorkel/cdk-github-runners",
       "datatype": true,
       "docs": {
-        "stability": "experimental",
-        "summary": "Properties for FargateRunner."
+        "stability": "experimental"
       },
-      "fqn": "@cloudsnorkel/cdk-github-runners.FargateRunnerProps",
+      "fqn": "@cloudsnorkel/cdk-github-runners.CodeBuildRunnerProps",
       "interfaces": [
         "@cloudsnorkel/cdk-github-runners.RunnerProviderProps"
       ],
       "kind": "interface",
       "locationInModule": {
-        "filename": "src/providers/fargate.ts",
-        "line": 17
+        "filename": "src/providers/codebuild.ts",
+        "line": 20
       },
-      "name": "FargateRunnerProps",
+      "name": "CodeBuildRunnerProps",
       "properties": [
         {
           "abstract": true,
           "docs": {
-            "default": "true",
-            "remarks": "Make sure the task will have access to GitHub. A public IP might be required unless you have NAT gateway.",
+            "default": "{@link ComputeType#SMALL}",
+            "remarks": "See the {@link ComputeType} enum for the possible values.",
             "stability": "experimental",
-            "summary": "Assign public IP to the runner task."
+            "summary": "The type of compute to use for this build."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/fargate.ts",
-            "line": 53
+            "filename": "src/providers/codebuild.ts",
+            "line": 62
           },
-          "name": "assignPublicIp",
+          "name": "computeType",
           "optional": true,
           "type": {
-            "primitive": "boolean"
+            "fqn": "aws-cdk-lib.aws_codebuild.ComputeType"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "a new cluster",
+            "default": "image builder with `CodeBuildRunner.LINUX_X64_DOCKERFILE_PATH` as Dockerfile",
+            "remarks": "A user named `runner` is expected to exist with access to Docker-in-Docker.",
             "stability": "experimental",
-            "summary": "Existing Fargate cluster to use."
+            "summary": "Provider running an image to run inside CodeBuild with GitHub runner pre-configured."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/fargate.ts",
-            "line": 44
+            "filename": "src/providers/codebuild.ts",
+            "line": 26
           },
-          "name": "cluster",
+          "name": "imageBuilder",
           "optional": true,
           "type": {
-            "fqn": "aws-cdk-lib.aws_ecs.Cluster"
+            "fqn": "@cloudsnorkel/cdk-github-runners.IImageBuilder"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "1024",
-            "remarks": "For tasks using the Fargate launch type,\nthis field is required and you must use one of the following values,\nwhich determines your range of valid values for the memory parameter:\n\n256 (.25 vCPU) - Available memory values: 512 (0.5 GB), 1024 (1 GB), 2048 (2 GB)\n\n512 (.5 vCPU) - Available memory values: 1024 (1 GB), 2048 (2 GB), 3072 (3 GB), 4096 (4 GB)\n\n1024 (1 vCPU) - Available memory values: 2048 (2 GB), 3072 (3 GB), 4096 (4 GB), 5120 (5 GB), 6144 (6 GB), 7168 (7 GB), 8192 (8 GB)\n\n2048 (2 vCPU) - Available memory values: Between 4096 (4 GB) and 16384 (16 GB) in increments of 1024 (1 GB)\n\n4096 (4 vCPU) - Available memory values: Between 8192 (8 GB) and 30720 (30 GB) in increments of 1024 (1 GB)",
+            "default": "'codebuild'",
             "stability": "experimental",
-            "summary": "The number of cpu units used by the task."
+            "summary": "GitHub Actions label used for this provider."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/fargate.ts",
-            "line": 72
+            "filename": "src/providers/codebuild.ts",
+            "line": 33
           },
-          "name": "cpu",
+          "name": "label",
           "optional": true,
           "type": {
-            "primitive": "number"
+            "primitive": "string"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "20",
-            "remarks": "The maximum supported value is 200 GiB.\n\nNOTE: This parameter is only supported for tasks hosted on AWS Fargate using platform version 1.4.0 or later.",
+            "default": "public project with no security group",
             "stability": "experimental",
-            "summary": "The amount (in GiB) of ephemeral storage to be allocated to the task."
+            "summary": "Security Group to assign to this instance."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/fargate.ts",
-            "line": 99
+            "filename": "src/providers/codebuild.ts",
+            "line": 47
           },
-          "name": "ephemeralStorageGiB",
+          "name": "securityGroup",
           "optional": true,
           "type": {
-            "primitive": "number"
+            "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "'fargate'",
+            "default": "no subnet",
             "stability": "experimental",
-            "summary": "GitHub Actions label used for this provider."
+            "summary": "Where to place the network interfaces within the VPC."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/fargate.ts",
-            "line": 23
+            "filename": "src/providers/codebuild.ts",
+            "line": 54
           },
-          "name": "label",
+          "name": "subnetSelection",
           "optional": true,
           "type": {
-            "primitive": "string"
+            "fqn": "aws-cdk-lib.aws_ec2.SubnetSelection"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "2048",
-            "remarks": "For tasks using the Fargate launch type,\nthis field is required and you must use one of the following values, which determines your range of valid values for the cpu parameter:\n\n512 (0.5 GB), 1024 (1 GB), 2048 (2 GB) - Available cpu values: 256 (.25 vCPU)\n\n1024 (1 GB), 2048 (2 GB), 3072 (3 GB), 4096 (4 GB) - Available cpu values: 512 (.5 vCPU)\n\n2048 (2 GB), 3072 (3 GB), 4096 (4 GB), 5120 (5 GB), 6144 (6 GB), 7168 (7 GB), 8192 (8 GB) - Available cpu values: 1024 (1 vCPU)\n\nBetween 4096 (4 GB) and 16384 (16 GB) in increments of 1024 (1 GB) - Available cpu values: 2048 (2 vCPU)\n\nBetween 8192 (8 GB) and 30720 (30 GB) in increments of 1024 (1 GB) - Available cpu values: 4096 (4 vCPU)",
+            "default": "Duration.hours(1)",
+            "remarks": "For valid values, see the timeoutInMinutes field in the AWS\nCodeBuild User Guide.",
             "stability": "experimental",
-            "summary": "The amount (in MiB) of memory used by the task."
+            "summary": "The number of minutes after which AWS CodeBuild stops the build if it's not complete."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/fargate.ts",
-            "line": 90
+            "filename": "src/providers/codebuild.ts",
+            "line": 71
           },
-          "name": "memoryLimitMiB",
+          "name": "timeout",
           "optional": true,
           "type": {
-            "primitive": "number"
+            "fqn": "aws-cdk-lib.Duration"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "a new security group",
+            "default": "no VPC",
             "stability": "experimental",
-            "summary": "Security Group to assign to the task."
+            "summary": "VPC to launch the runners in."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/fargate.ts",
-            "line": 37
+            "filename": "src/providers/codebuild.ts",
+            "line": 40
           },
-          "name": "securityGroup",
-          "optional": true,
-          "type": {
-            "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "default": "default account VPC",
-            "stability": "experimental",
-            "summary": "VPC to launch the runners in."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/providers/fargate.ts",
-            "line": 30
-          },
-          "name": "vpc",
+          "name": "vpc",
           "optional": true,
           "type": {
             "fqn": "aws-cdk-lib.aws_ec2.IVpc"
           }
         }
       ],
-      "symbolId": "src/providers/fargate:FargateRunnerProps"
+      "symbolId": "src/providers/codebuild:CodeBuildRunnerProps"
     },
-    "@cloudsnorkel/cdk-github-runners.GitHubRunners": {
+    "@cloudsnorkel/cdk-github-runners.FargateRunner": {
       "assembly": "@cloudsnorkel/cdk-github-runners",
       "base": "constructs.Construct",
       "docs": {
-        "remarks": "It creates a webhook, secrets, and a step function to orchestrate all runs. Secrets are not automatically filled. See README.md for instructions on how to setup GitHub integration.\n\nBy default, this will create a runner provider of each available type with the defaults. This is good enough for the initial setup stage when you just want to get GitHub integration working.\n\n```typescript\nnew GitHubRunners(stack, 'runners', {});\n```\n\nUsually you'd want to configure the runner providers so the runners can run in a certain VPC or have certain permissions.\n\n```typescript\nconst vpc = ec2.Vpc.fromLookup(stack, 'vpc', { vpcId: 'vpc-1234567' });\nconst runnerSg = new ec2.SecurityGroup(stack, 'runner security group', { vpc: vpc });\nconst dbSg = ec2.SecurityGroup.fromSecurityGroupId(stack, 'database security group', 'sg-1234567');\nconst bucket = new s3.Bucket(stack, 'runner bucket');\n\n// create a custom CodeBuild provider\nconst myProvider = new CodeBuildRunner(\n   stack, 'codebuild runner',\n   {\n      label: 'my-codebuild',\n      vpc: vpc,\n      securityGroup: runnerSg,\n   },\n);\n// grant some permissions to the provider\nbucket.grantReadWrite(myProvider);\ndbSg.connections.allowFrom(runnerSg, ec2.Port.tcp(3306), 'allow runners to connect to MySQL database');\n\n// create the runner infrastructure\nnew GitHubRunners(\n   stack,\n   'runners',\n   {\n     providers: [myProvider],\n     defaultProviderLabel: 'my-codebuild',\n   }\n);\n```",
+        "remarks": "Creates a task definition with a single container that gets started for each job.\n\nThis construct is not meant to be used by itself. It should be passed in the providers property for GitHubRunners.",
         "stability": "experimental",
-        "summary": "Create all the required infrastructure to provide self-hosted GitHub runners."
+        "summary": "GitHub Actions runner provider using Fargate to execute the actions."
       },
-      "fqn": "@cloudsnorkel/cdk-github-runners.GitHubRunners",
+      "fqn": "@cloudsnorkel/cdk-github-runners.FargateRunner",
       "initializer": {
         "docs": {
           "stability": "experimental"
         },
         "locationInModule": {
-          "filename": "src/runner.ts",
-          "line": 93
+          "filename": "src/providers/fargate.ts",
+          "line": 229
         },
         "parameters": [
           {
@@ -3761,477 +3968,1241 @@
           {
             "name": "props",
             "type": {
-              "fqn": "@cloudsnorkel/cdk-github-runners.GitHubRunnersProps"
+              "fqn": "@cloudsnorkel/cdk-github-runners.FargateRunnerProps"
             }
           }
         ]
       },
+      "interfaces": [
+        "@cloudsnorkel/cdk-github-runners.IRunnerProvider"
+      ],
       "kind": "class",
       "locationInModule": {
-        "filename": "src/runner.ts",
-        "line": 73
+        "filename": "src/providers/fargate.ts",
+        "line": 160
       },
-      "name": "GitHubRunners",
+      "methods": [
+        {
+          "docs": {
+            "remarks": "Called by GithubRunners and shouldn't be called manually.",
+            "stability": "experimental",
+            "summary": "Generate step function task(s) to start a new runner."
+          },
+          "locationInModule": {
+            "filename": "src/providers/fargate.ts",
+            "line": 298
+          },
+          "name": "getStepFunctionTask",
+          "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "workflow job details."
+              },
+              "name": "parameters",
+              "type": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.RunnerRuntimeParameters"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_stepfunctions.IChainable"
+            }
+          }
+        }
+      ],
+      "name": "FargateRunner",
       "properties": [
         {
+          "const": true,
           "docs": {
+            "remarks": "Use this Dockerfile unless you need to customize it further than allowed by hooks.\n\nAvailable build arguments that can be set in the image builder:\n* `BASE_IMAGE` sets the `FROM` line. This should be an Ubuntu compatible image.\n* `EXTRA_PACKAGES` can be used to install additional packages.",
             "stability": "experimental",
-            "summary": "Default provider as set by {@link GitHubRunnersProps.defaultProviderLabel}."
+            "summary": "Path to Dockerfile for Linux ARM64 with all the requirement for Fargate runner."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/runner.ts",
-            "line": 83
+            "filename": "src/providers/fargate.ts",
+            "line": 177
           },
-          "name": "defaultProvider",
+          "name": "LINUX_ARM64_DOCKERFILE_PATH",
+          "static": true,
           "type": {
-            "fqn": "@cloudsnorkel/cdk-github-runners.IRunnerProvider"
+            "primitive": "string"
           }
         },
         {
+          "const": true,
           "docs": {
-            "stability": "experimental"
+            "remarks": "Use this Dockerfile unless you need to customize it further than allowed by hooks.\n\nAvailable build arguments that can be set in the image builder:\n* `BASE_IMAGE` sets the `FROM` line. This should be an Ubuntu compatible image.\n* `EXTRA_PACKAGES` can be used to install additional packages.",
+            "stability": "experimental",
+            "summary": "Path to Dockerfile for Linux x64 with all the requirement for Fargate runner."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/runner.ts",
-            "line": 93
+            "filename": "src/providers/fargate.ts",
+            "line": 168
           },
-          "name": "props",
+          "name": "LINUX_X64_DOCKERFILE_PATH",
+          "static": true,
           "type": {
-            "fqn": "@cloudsnorkel/cdk-github-runners.GitHubRunnersProps"
+            "primitive": "string"
           }
         },
         {
           "docs": {
             "stability": "experimental",
-            "summary": "Configured runner providers."
+            "summary": "Whether task will have a public IP."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/runner.ts",
-            "line": 78
+            "filename": "src/providers/fargate.ts",
+            "line": 212
           },
-          "name": "providers",
+          "name": "assignPublicIp",
           "type": {
-            "collection": {
-              "elementtype": {
-                "fqn": "@cloudsnorkel/cdk-github-runners.IRunnerProvider"
-              },
-              "kind": "array"
-            }
+            "primitive": "boolean"
           }
         },
         {
           "docs": {
             "stability": "experimental",
-            "summary": "Secrets for GitHub communication including webhook secret and runner authentication."
+            "summary": "Cluster hosting the task hosting the runner."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/runner.ts",
-            "line": 88
+            "filename": "src/providers/fargate.ts",
+            "line": 182
           },
-          "name": "secrets",
+          "name": "cluster",
           "type": {
-            "fqn": "@cloudsnorkel/cdk-github-runners.Secrets"
+            "fqn": "aws-cdk-lib.aws_ecs.Cluster"
           }
-        }
-      ],
-      "symbolId": "src/runner:GitHubRunners"
-    },
-    "@cloudsnorkel/cdk-github-runners.GitHubRunnersProps": {
-      "assembly": "@cloudsnorkel/cdk-github-runners",
-      "datatype": true,
-      "docs": {
-        "stability": "experimental",
-        "summary": "Properties for GitHubRunners."
-      },
-      "fqn": "@cloudsnorkel/cdk-github-runners.GitHubRunnersProps",
-      "kind": "interface",
-      "locationInModule": {
-        "filename": "src/runner.ts",
-        "line": 15
-      },
-      "name": "GitHubRunnersProps",
-      "properties": [
+        },
         {
-          "abstract": true,
           "docs": {
-            "default": "'codebuild'",
-            "remarks": "A provider with that label must be configured.",
             "stability": "experimental",
-            "summary": "Label of default provider in case the workflow job doesn't specify any known label."
+            "summary": "The network connections associated with this resource."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/runner.ts",
-            "line": 22
+            "filename": "src/providers/fargate.ts",
+            "line": 222
           },
-          "name": "defaultProviderLabel",
-          "optional": true,
+          "name": "connections",
+          "overrides": "aws-cdk-lib.aws_ec2.IConnectable",
           "type": {
-            "primitive": "string"
+            "fqn": "aws-cdk-lib.aws_ec2.Connections"
           }
         },
         {
-          "abstract": true,
           "docs": {
-            "default": "CodeBuild, Lambda and Fargate runners with all the defaults (no VPC or default account VPC)",
-            "remarks": "At least one provider is required. Provider will be selected when its label matches the labels requested by the workflow job.",
             "stability": "experimental",
-            "summary": "List of runner providers to use."
+            "summary": "Container definition hosting the runner."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/runner.ts",
-            "line": 29
+            "filename": "src/providers/fargate.ts",
+            "line": 192
           },
-          "name": "providers",
-          "optional": true,
+          "name": "container",
           "type": {
-            "collection": {
-              "elementtype": {
-                "fqn": "@cloudsnorkel/cdk-github-runners.IRunnerProvider"
-              },
-              "kind": "array"
-            }
+            "fqn": "aws-cdk-lib.aws_ecs.ContainerDefinition"
           }
-        }
-      ],
-      "symbolId": "src/runner:GitHubRunnersProps"
-    },
-    "@cloudsnorkel/cdk-github-runners.IRunnerProvider": {
-      "assembly": "@cloudsnorkel/cdk-github-runners",
-      "docs": {
-        "remarks": "Implementations create all required resources and return a step function task that starts those resources from {@link getStepFunctionTask}.",
-        "stability": "experimental",
-        "summary": "Interface for all runner providers."
-      },
-      "fqn": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
-      "interfaces": [
-        "aws-cdk-lib.aws_ec2.IConnectable",
-        "aws-cdk-lib.aws_iam.IGrantable"
-      ],
-      "kind": "interface",
-      "locationInModule": {
-        "filename": "src/providers/common.ts",
-        "line": 89
-      },
-      "methods": [
+        },
         {
-          "abstract": true,
           "docs": {
-            "remarks": "Called by GithubRunners and shouldn't be called manually.",
             "stability": "experimental",
-            "summary": "Generate step function tasks that execute the runner."
+            "summary": "Grant principal used to add permissions to the runner role."
           },
+          "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/common.ts",
-            "line": 112
+            "filename": "src/providers/fargate.ts",
+            "line": 217
           },
-          "name": "getStepFunctionTask",
-          "parameters": [
-            {
-              "docs": {
-                "summary": "specific build parameters."
-              },
-              "name": "parameters",
-              "type": {
-                "fqn": "@cloudsnorkel/cdk-github-runners.RunnerRuntimeParameters"
-              }
-            }
-          ],
-          "returns": {
-            "type": {
-              "fqn": "aws-cdk-lib.aws_stepfunctions.IChainable"
-            }
+          "name": "grantPrincipal",
+          "overrides": "aws-cdk-lib.aws_iam.IGrantable",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_iam.IPrincipal"
           }
-        }
-      ],
-      "name": "IRunnerProvider",
-      "properties": [
+        },
         {
-          "abstract": true,
           "docs": {
             "stability": "experimental",
-            "summary": "GitHub Actions label associated with this runner provider."
+            "summary": "Label associated with this provider."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/common.ts",
-            "line": 93
+            "filename": "src/providers/fargate.ts",
+            "line": 197
           },
           "name": "label",
+          "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
           "type": {
             "primitive": "string"
           }
         },
         {
-          "abstract": true,
           "docs": {
             "stability": "experimental",
-            "summary": "Security group associated with runners."
+            "summary": "Use spot pricing for Fargate tasks."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/common.ts",
-            "line": 103
+            "filename": "src/providers/fargate.ts",
+            "line": 227
+          },
+          "name": "spot",
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Fargate task hosting the runner."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/fargate.ts",
+            "line": 187
+          },
+          "name": "task",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ecs.FargateTaskDefinition"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Security group attached to the task."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/fargate.ts",
+            "line": 207
           },
           "name": "securityGroup",
           "optional": true,
+          "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
           "type": {
             "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
           }
         },
         {
-          "abstract": true,
           "docs": {
             "stability": "experimental",
-            "summary": "VPC network in which runners will be placed."
+            "summary": "VPC used for hosting the task."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/common.ts",
-            "line": 98
+            "filename": "src/providers/fargate.ts",
+            "line": 202
           },
           "name": "vpc",
           "optional": true,
+          "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
           "type": {
             "fqn": "aws-cdk-lib.aws_ec2.IVpc"
           }
         }
       ],
-      "symbolId": "src/providers/common:IRunnerProvider"
+      "symbolId": "src/providers/fargate:FargateRunner"
     },
-    "@cloudsnorkel/cdk-github-runners.LambdaRunner": {
+    "@cloudsnorkel/cdk-github-runners.FargateRunnerProps": {
       "assembly": "@cloudsnorkel/cdk-github-runners",
-      "base": "constructs.Construct",
+      "datatype": true,
       "docs": {
-        "remarks": "Creates a Docker-based function that gets executed for each job.\n\nThis construct is not meant to be used by itself. It should be passed in the providers property for GitHubRunners.",
         "stability": "experimental",
-        "summary": "GitHub Actions runner provider using Lambda to execute the actions."
+        "summary": "Properties for FargateRunner."
       },
-      "fqn": "@cloudsnorkel/cdk-github-runners.LambdaRunner",
-      "initializer": {
+      "fqn": "@cloudsnorkel/cdk-github-runners.FargateRunnerProps",
+      "interfaces": [
+        "@cloudsnorkel/cdk-github-runners.RunnerProviderProps"
+      ],
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/providers/fargate.ts",
+        "line": 19
+      },
+      "name": "FargateRunnerProps",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "true",
+            "remarks": "Make sure the task will have access to GitHub. A public IP might be required unless you have NAT gateway.",
+            "stability": "experimental",
+            "summary": "Assign public IP to the runner task."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/fargate.ts",
+            "line": 72
+          },
+          "name": "assignPublicIp",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "a new cluster",
+            "stability": "experimental",
+            "summary": "Existing Fargate cluster to use."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/fargate.ts",
+            "line": 63
+          },
+          "name": "cluster",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ecs.Cluster"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "1024",
+            "remarks": "For tasks using the Fargate launch type,\nthis field is required and you must use one of the following values,\nwhich determines your range of valid values for the memory parameter:\n\n256 (.25 vCPU) - Available memory values: 512 (0.5 GB), 1024 (1 GB), 2048 (2 GB)\n\n512 (.5 vCPU) - Available memory values: 1024 (1 GB), 2048 (2 GB), 3072 (3 GB), 4096 (4 GB)\n\n1024 (1 vCPU) - Available memory values: 2048 (2 GB), 3072 (3 GB), 4096 (4 GB), 5120 (5 GB), 6144 (6 GB), 7168 (7 GB), 8192 (8 GB)\n\n2048 (2 vCPU) - Available memory values: Between 4096 (4 GB) and 16384 (16 GB) in increments of 1024 (1 GB)\n\n4096 (4 vCPU) - Available memory values: Between 8192 (8 GB) and 30720 (30 GB) in increments of 1024 (1 GB)",
+            "stability": "experimental",
+            "summary": "The number of cpu units used by the task."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/fargate.ts",
+            "line": 91
+          },
+          "name": "cpu",
+          "optional": true,
+          "type": {
+            "primitive": "number"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "20",
+            "remarks": "The maximum supported value is 200 GiB.\n\nNOTE: This parameter is only supported for tasks hosted on AWS Fargate using platform version 1.4.0 or later.",
+            "stability": "experimental",
+            "summary": "The amount (in GiB) of ephemeral storage to be allocated to the task."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/fargate.ts",
+            "line": 118
+          },
+          "name": "ephemeralStorageGiB",
+          "optional": true,
+          "type": {
+            "primitive": "number"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "image builder with `FargateRunner.LINUX_X64_DOCKERFILE_PATH` as Dockerfile",
+            "remarks": "A user named `runner` is expected to exist.\n\nThe entry point should start GitHub runner. For example:\n\n```\n#!/bin/bash\nset -e -u -o pipefail\n\n/home/runner/config.sh --unattended --url \"https://${GITHUB_DOMAIN}/${OWNER}/${REPO}\" --token \"${RUNNER_TOKEN}\" --ephemeral --work _work --labels \"${RUNNER_LABEL}\" --disableupdate --name \"${RUNNER_NAME}\"\n/home/runner/run.sh\n```",
+            "stability": "experimental",
+            "summary": "Provider running an image to run inside CodeBuild with GitHub runner pre-configured."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/fargate.ts",
+            "line": 35
+          },
+          "name": "imageBuilder",
+          "optional": true,
+          "type": {
+            "fqn": "@cloudsnorkel/cdk-github-runners.IImageBuilder"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "'fargate'",
+            "stability": "experimental",
+            "summary": "GitHub Actions label used for this provider."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/fargate.ts",
+            "line": 42
+          },
+          "name": "label",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "2048",
+            "remarks": "For tasks using the Fargate launch type,\nthis field is required and you must use one of the following values, which determines your range of valid values for the cpu parameter:\n\n512 (0.5 GB), 1024 (1 GB), 2048 (2 GB) - Available cpu values: 256 (.25 vCPU)\n\n1024 (1 GB), 2048 (2 GB), 3072 (3 GB), 4096 (4 GB) - Available cpu values: 512 (.5 vCPU)\n\n2048 (2 GB), 3072 (3 GB), 4096 (4 GB), 5120 (5 GB), 6144 (6 GB), 7168 (7 GB), 8192 (8 GB) - Available cpu values: 1024 (1 vCPU)\n\nBetween 4096 (4 GB) and 16384 (16 GB) in increments of 1024 (1 GB) - Available cpu values: 2048 (2 vCPU)\n\nBetween 8192 (8 GB) and 30720 (30 GB) in increments of 1024 (1 GB) - Available cpu values: 4096 (4 vCPU)",
+            "stability": "experimental",
+            "summary": "The amount (in MiB) of memory used by the task."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/fargate.ts",
+            "line": 109
+          },
+          "name": "memoryLimitMiB",
+          "optional": true,
+          "type": {
+            "primitive": "number"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "a new security group",
+            "stability": "experimental",
+            "summary": "Security Group to assign to the task."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/fargate.ts",
+            "line": 56
+          },
+          "name": "securityGroup",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "false",
+            "remarks": "* Runners may fail to start due to missing capacity.\n* Runners might be stopped prematurely with spot pricing.",
+            "stability": "experimental",
+            "summary": "Use Fargate spot capacity provider to save money."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/fargate.ts",
+            "line": 128
+          },
+          "name": "spot",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "default account VPC",
+            "stability": "experimental",
+            "summary": "VPC to launch the runners in."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/fargate.ts",
+            "line": 49
+          },
+          "name": "vpc",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.IVpc"
+          }
+        }
+      ],
+      "symbolId": "src/providers/fargate:FargateRunnerProps"
+    },
+    "@cloudsnorkel/cdk-github-runners.GitHubRunners": {
+      "assembly": "@cloudsnorkel/cdk-github-runners",
+      "base": "constructs.Construct",
+      "docs": {
+        "remarks": "It creates a webhook, secrets, and a step function to orchestrate all runs. Secrets are not automatically filled. See README.md for instructions on how to setup GitHub integration.\n\nBy default, this will create a runner provider of each available type with the defaults. This is good enough for the initial setup stage when you just want to get GitHub integration working.\n\n```typescript\nnew GitHubRunners(stack, 'runners', {});\n```\n\nUsually you'd want to configure the runner providers so the runners can run in a certain VPC or have certain permissions.\n\n```typescript\nconst vpc = ec2.Vpc.fromLookup(stack, 'vpc', { vpcId: 'vpc-1234567' });\nconst runnerSg = new ec2.SecurityGroup(stack, 'runner security group', { vpc: vpc });\nconst dbSg = ec2.SecurityGroup.fromSecurityGroupId(stack, 'database security group', 'sg-1234567');\nconst bucket = new s3.Bucket(stack, 'runner bucket');\n\n// create a custom CodeBuild provider\nconst myProvider = new CodeBuildRunner(\n   stack, 'codebuild runner',\n   {\n      label: 'my-codebuild',\n      vpc: vpc,\n      securityGroup: runnerSg,\n   },\n);\n// grant some permissions to the provider\nbucket.grantReadWrite(myProvider);\ndbSg.connections.allowFrom(runnerSg, ec2.Port.tcp(3306), 'allow runners to connect to MySQL database');\n\n// create the runner infrastructure\nnew GitHubRunners(\n   stack,\n   'runners',\n   {\n     providers: [myProvider],\n   }\n);\n```",
+        "stability": "experimental",
+        "summary": "Create all the required infrastructure to provide self-hosted GitHub runners."
+      },
+      "fqn": "@cloudsnorkel/cdk-github-runners.GitHubRunners",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        },
+        "locationInModule": {
+          "filename": "src/runner.ts",
+          "line": 83
+        },
+        "parameters": [
+          {
+            "name": "scope",
+            "type": {
+              "fqn": "constructs.Construct"
+            }
+          },
+          {
+            "name": "id",
+            "type": {
+              "primitive": "string"
+            }
+          },
+          {
+            "name": "props",
+            "optional": true,
+            "type": {
+              "fqn": "@cloudsnorkel/cdk-github-runners.GitHubRunnersProps"
+            }
+          }
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/runner.ts",
+        "line": 65
+      },
+      "name": "GitHubRunners",
+      "properties": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Configured runner providers."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/runner.ts",
+            "line": 72
+          },
+          "name": "providers",
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.IRunnerProvider"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Secrets for GitHub communication including webhook secret and runner authentication."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/runner.ts",
+            "line": 77
+          },
+          "name": "secrets",
+          "type": {
+            "fqn": "@cloudsnorkel/cdk-github-runners.Secrets"
+          }
+        }
+      ],
+      "symbolId": "src/runner:GitHubRunners"
+    },
+    "@cloudsnorkel/cdk-github-runners.GitHubRunnersProps": {
+      "assembly": "@cloudsnorkel/cdk-github-runners",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Properties for GitHubRunners."
+      },
+      "fqn": "@cloudsnorkel/cdk-github-runners.GitHubRunnersProps",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/runner.ts",
+        "line": 16
+      },
+      "name": "GitHubRunnersProps",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "CodeBuild, Lambda and Fargate runners with all the defaults (no VPC or default account VPC)",
+            "remarks": "At least one provider is required. Provider will be selected when its label matches the labels requested by the workflow job.",
+            "stability": "experimental",
+            "summary": "List of runner providers to use."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/runner.ts",
+            "line": 22
+          },
+          "name": "providers",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.IRunnerProvider"
+              },
+              "kind": "array"
+            }
+          }
+        }
+      ],
+      "symbolId": "src/runner:GitHubRunnersProps"
+    },
+    "@cloudsnorkel/cdk-github-runners.IImageBuilder": {
+      "assembly": "@cloudsnorkel/cdk-github-runners",
+      "docs": {
+        "remarks": "Anything that ends up with an ECR repository containing a Docker image that runs GitHub self-hosted runners can be used. A simple implementation could even point to an existing image and nothing else.\n\nIt's important that the specified image tag be available at the time the repository is available. Providers usually assume the image is ready and will fail if it's not.\n\nThe image can be further updated over time manually or using a schedule as long as it is always written to the same tag.",
+        "stability": "experimental",
+        "summary": "Interface for constructs that build an image that can be used in {@link IRunnerProvider}."
+      },
+      "fqn": "@cloudsnorkel/cdk-github-runners.IImageBuilder",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/providers/common.ts",
+        "line": 129
+      },
+      "methods": [
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "This method can be called multiple times if the image is bound to multiple providers. Make sure you cache the image when implementing or return an error if this builder doesn't support reusing images.",
+            "returns": "image",
+            "stability": "experimental",
+            "summary": "ECR repository containing the image."
+          },
+          "locationInModule": {
+            "filename": "src/providers/common.ts",
+            "line": 137
+          },
+          "name": "bind",
+          "returns": {
+            "type": {
+              "fqn": "@cloudsnorkel/cdk-github-runners.RunnerImage"
+            }
+          }
+        }
+      ],
+      "name": "IImageBuilder",
+      "symbolId": "src/providers/common:IImageBuilder"
+    },
+    "@cloudsnorkel/cdk-github-runners.IRunnerProvider": {
+      "assembly": "@cloudsnorkel/cdk-github-runners",
+      "docs": {
+        "remarks": "Implementations create all required resources and return a step function task that starts those resources from {@link getStepFunctionTask}.",
+        "stability": "experimental",
+        "summary": "Interface for all runner providers."
+      },
+      "fqn": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
+      "interfaces": [
+        "aws-cdk-lib.aws_ec2.IConnectable",
+        "aws-cdk-lib.aws_iam.IGrantable"
+      ],
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/providers/common.ts",
+        "line": 193
+      },
+      "methods": [
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Called by GithubRunners and shouldn't be called manually.",
+            "stability": "experimental",
+            "summary": "Generate step function tasks that execute the runner."
+          },
+          "locationInModule": {
+            "filename": "src/providers/common.ts",
+            "line": 216
+          },
+          "name": "getStepFunctionTask",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "specific build parameters."
+              },
+              "name": "parameters",
+              "type": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.RunnerRuntimeParameters"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_stepfunctions.IChainable"
+            }
+          }
+        }
+      ],
+      "name": "IRunnerProvider",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "GitHub Actions label associated with this runner provider."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/common.ts",
+            "line": 197
+          },
+          "name": "label",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Security group associated with runners."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/common.ts",
+            "line": 207
+          },
+          "name": "securityGroup",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "VPC network in which runners will be placed."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/common.ts",
+            "line": 202
+          },
+          "name": "vpc",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.IVpc"
+          }
+        }
+      ],
+      "symbolId": "src/providers/common:IRunnerProvider"
+    },
+    "@cloudsnorkel/cdk-github-runners.LambdaRunner": {
+      "assembly": "@cloudsnorkel/cdk-github-runners",
+      "base": "constructs.Construct",
+      "docs": {
+        "remarks": "Creates a Docker-based function that gets executed for each job.\n\nThis construct is not meant to be used by itself. It should be passed in the providers property for GitHubRunners.",
+        "stability": "experimental",
+        "summary": "GitHub Actions runner provider using Lambda to execute the actions."
+      },
+      "fqn": "@cloudsnorkel/cdk-github-runners.LambdaRunner",
+      "initializer": {
         "docs": {
           "stability": "experimental"
         },
-        "locationInModule": {
-          "filename": "src/providers/lambda.ts",
-          "line": 103
+        "locationInModule": {
+          "filename": "src/providers/lambda.ts",
+          "line": 135
+        },
+        "parameters": [
+          {
+            "name": "scope",
+            "type": {
+              "fqn": "constructs.Construct"
+            }
+          },
+          {
+            "name": "id",
+            "type": {
+              "primitive": "string"
+            }
+          },
+          {
+            "name": "props",
+            "type": {
+              "fqn": "@cloudsnorkel/cdk-github-runners.LambdaRunnerProps"
+            }
+          }
+        ]
+      },
+      "interfaces": [
+        "@cloudsnorkel/cdk-github-runners.IRunnerProvider"
+      ],
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/providers/lambda.ts",
+        "line": 91
+      },
+      "methods": [
+        {
+          "docs": {
+            "remarks": "Called by GithubRunners and shouldn't be called manually.",
+            "stability": "experimental",
+            "summary": "Generate step function task(s) to start a new runner."
+          },
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 198
+          },
+          "name": "getStepFunctionTask",
+          "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "workflow job details."
+              },
+              "name": "parameters",
+              "type": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.RunnerRuntimeParameters"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_stepfunctions.IChainable"
+            }
+          }
+        }
+      ],
+      "name": "LambdaRunner",
+      "properties": [
+        {
+          "const": true,
+          "docs": {
+            "remarks": "Use this Dockerfile unless you need to customize it further than allowed by hooks.\n\nAvailable build arguments that can be set in the image builder:\n* `BASE_IMAGE` sets the `FROM` line. This should be similar to public.ecr.aws/lambda/nodejs:14.\n* `EXTRA_PACKAGES` can be used to install additional packages.",
+            "stability": "experimental",
+            "summary": "Path to Dockerfile for Linux ARM64 with all the requirement for Lambda runner."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 108
+          },
+          "name": "LINUX_ARM64_DOCKERFILE_PATH",
+          "static": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "const": true,
+          "docs": {
+            "remarks": "Use this Dockerfile unless you need to customize it further than allowed by hooks.\n\nAvailable build arguments that can be set in the image builder:\n* `BASE_IMAGE` sets the `FROM` line. This should be similar to public.ecr.aws/lambda/nodejs:14.\n* `EXTRA_PACKAGES` can be used to install additional packages.",
+            "stability": "experimental",
+            "summary": "Path to Dockerfile for Linux x64 with all the requirement for Lambda runner."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 99
+          },
+          "name": "LINUX_X64_DOCKERFILE_PATH",
+          "static": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The network connections associated with this resource."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 187
+          },
+          "name": "connections",
+          "overrides": "aws-cdk-lib.aws_ec2.IConnectable",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.Connections"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The function hosting the GitHub runner."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 113
+          },
+          "name": "function",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_lambda.Function"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Grant principal used to add permissions to the runner role."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 133
+          },
+          "name": "grantPrincipal",
+          "overrides": "aws-cdk-lib.aws_iam.IGrantable",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_iam.IPrincipal"
+          }
         },
-        "parameters": [
-          {
-            "name": "scope",
-            "type": {
-              "fqn": "constructs.Construct"
-            }
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Label associated with this provider."
           },
-          {
-            "name": "id",
-            "type": {
-              "primitive": "string"
-            }
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 118
           },
-          {
-            "name": "props",
-            "type": {
-              "fqn": "@cloudsnorkel/cdk-github-runners.LambdaRunnerProps"
-            }
+          "name": "label",
+          "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
+          "type": {
+            "primitive": "string"
           }
-        ]
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Security group attached to the function."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 128
+          },
+          "name": "securityGroup",
+          "optional": true,
+          "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "VPC used for hosting the function."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 123
+          },
+          "name": "vpc",
+          "optional": true,
+          "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.IVpc"
+          }
+        }
+      ],
+      "symbolId": "src/providers/lambda:LambdaRunner"
+    },
+    "@cloudsnorkel/cdk-github-runners.LambdaRunnerProps": {
+      "assembly": "@cloudsnorkel/cdk-github-runners",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental"
       },
+      "fqn": "@cloudsnorkel/cdk-github-runners.LambdaRunnerProps",
       "interfaces": [
-        "@cloudsnorkel/cdk-github-runners.IRunnerProvider"
+        "@cloudsnorkel/cdk-github-runners.RunnerProviderProps"
       ],
-      "kind": "class",
+      "kind": "interface",
       "locationInModule": {
         "filename": "src/providers/lambda.ts",
-        "line": 77
+        "line": 18
       },
-      "methods": [
+      "name": "LambdaRunnerProps",
+      "properties": [
         {
+          "abstract": true,
           "docs": {
-            "remarks": "Called by GithubRunners and shouldn't be called manually.",
+            "default": "10 GiB",
             "stability": "experimental",
-            "summary": "Generate step function task(s) to start a new runner."
+            "summary": "The size of the function’s /tmp directory in MiB."
           },
+          "immutable": true,
           "locationInModule": {
             "filename": "src/providers/lambda.ts",
-            "line": 150
+            "line": 51
           },
-          "name": "getStepFunctionTask",
-          "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
-          "parameters": [
-            {
-              "docs": {
-                "summary": "workflow job details."
-              },
-              "name": "parameters",
-              "type": {
-                "fqn": "@cloudsnorkel/cdk-github-runners.RunnerRuntimeParameters"
-              }
-            }
-          ],
-          "returns": {
-            "type": {
-              "fqn": "aws-cdk-lib.aws_stepfunctions.IChainable"
-            }
+          "name": "ephemeralStorageSize",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.Size"
           }
-        }
-      ],
-      "name": "LambdaRunner",
-      "properties": [
+        },
         {
+          "abstract": true,
           "docs": {
+            "default": "image builder with LambdaRunner.LINUX_X64_DOCKERFILE_PATH as Dockerfile",
+            "remarks": "The default command (`CMD`) should be `[\"runner.handler\"]` which points to an included `runner.js` with a function named `handler`. The function should start the GitHub runner.",
+            "see": "https://github.com/CloudSnorkel/cdk-github-runners/tree/main/src/providers/docker-images/lambda",
             "stability": "experimental",
-            "summary": "The network connections associated with this resource."
+            "summary": "Provider running an image to run inside CodeBuild with GitHub runner pre-configured."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/lambda.ts",
-            "line": 139
+            "line": 27
           },
-          "name": "connections",
-          "overrides": "aws-cdk-lib.aws_ec2.IConnectable",
+          "name": "imageBuilder",
+          "optional": true,
           "type": {
-            "fqn": "aws-cdk-lib.aws_ec2.Connections"
+            "fqn": "@cloudsnorkel/cdk-github-runners.IImageBuilder"
           }
         },
         {
+          "abstract": true,
           "docs": {
+            "default": "'lambda'",
             "stability": "experimental",
-            "summary": "The function hosting the GitHub runner."
+            "summary": "GitHub Actions label used for this provider."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 34
+          },
+          "name": "label",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "2048",
+            "remarks": "Lambda uses this value to proportionally allocate the amount of CPU\npower. For more information, see Resource Model in the AWS Lambda\nDeveloper Guide.",
+            "stability": "experimental",
+            "summary": "The amount of memory, in MB, that is allocated to your Lambda function."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 44
+          },
+          "name": "memorySize",
+          "optional": true,
+          "type": {
+            "primitive": "number"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "public lambda with no security group",
+            "stability": "experimental",
+            "summary": "Security Group to assign to this instance."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 74
+          },
+          "name": "securityGroup",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "no subnet",
+            "stability": "experimental",
+            "summary": "Where to place the network interfaces within the VPC."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/lambda.ts",
             "line": 81
           },
-          "name": "function",
+          "name": "subnetSelection",
+          "optional": true,
           "type": {
-            "fqn": "aws-cdk-lib.aws_lambda.Function"
+            "fqn": "aws-cdk-lib.aws_ec2.SubnetSelection"
           }
         },
         {
+          "abstract": true,
           "docs": {
+            "default": "Duration.minutes(15)",
+            "remarks": "Because the execution time affects cost, set this value\nbased on the function's expected execution time.",
             "stability": "experimental",
-            "summary": "Grant principal used to add permissions to the runner role."
+            "summary": "The function execution time (in seconds) after which Lambda terminates the function."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/lambda.ts",
-            "line": 101
+            "line": 60
           },
-          "name": "grantPrincipal",
-          "overrides": "aws-cdk-lib.aws_iam.IGrantable",
+          "name": "timeout",
+          "optional": true,
           "type": {
-            "fqn": "aws-cdk-lib.aws_iam.IPrincipal"
+            "fqn": "aws-cdk-lib.Duration"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "no VPC",
+            "stability": "experimental",
+            "summary": "VPC to launch the runners in."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 67
+          },
+          "name": "vpc",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.IVpc"
+          }
+        }
+      ],
+      "symbolId": "src/providers/lambda:LambdaRunnerProps"
+    },
+    "@cloudsnorkel/cdk-github-runners.Os": {
+      "assembly": "@cloudsnorkel/cdk-github-runners",
+      "docs": {
+        "stability": "experimental",
+        "summary": "OS enum for an image."
+      },
+      "fqn": "@cloudsnorkel/cdk-github-runners.Os",
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/providers/common.ts",
+        "line": 63
+      },
+      "methods": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Checks if the given OS is the same as this one."
+          },
+          "locationInModule": {
+            "filename": "src/providers/common.ts",
+            "line": 86
+          },
+          "name": "is",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "OS to compare."
+              },
+              "name": "os",
+              "type": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.Os"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "primitive": "boolean"
+            }
           }
-        },
+        }
+      ],
+      "name": "Os",
+      "properties": [
         {
+          "const": true,
           "docs": {
             "stability": "experimental",
-            "summary": "Label associated with this provider."
+            "summary": "Linux."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/lambda.ts",
-            "line": 86
+            "filename": "src/providers/common.ts",
+            "line": 67
           },
-          "name": "label",
-          "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
+          "name": "LINUX",
+          "static": true,
           "type": {
-            "primitive": "string"
+            "fqn": "@cloudsnorkel/cdk-github-runners.Os"
           }
         },
         {
+          "const": true,
           "docs": {
             "stability": "experimental",
-            "summary": "Security group attached to the function."
+            "summary": "Windows."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/lambda.ts",
-            "line": 96
+            "filename": "src/providers/common.ts",
+            "line": 72
           },
-          "name": "securityGroup",
-          "optional": true,
-          "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
+          "name": "WINDOWS",
+          "static": true,
           "type": {
-            "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
+            "fqn": "@cloudsnorkel/cdk-github-runners.Os"
           }
         },
         {
           "docs": {
-            "stability": "experimental",
-            "summary": "VPC used for hosting the function."
+            "stability": "experimental"
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/lambda.ts",
-            "line": 91
+            "filename": "src/providers/common.ts",
+            "line": 78
           },
-          "name": "vpc",
-          "optional": true,
-          "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
+          "name": "name",
           "type": {
-            "fqn": "aws-cdk-lib.aws_ec2.IVpc"
+            "primitive": "string"
           }
         }
       ],
-      "symbolId": "src/providers/lambda:LambdaRunner"
+      "symbolId": "src/providers/common:Os"
     },
-    "@cloudsnorkel/cdk-github-runners.LambdaRunnerProps": {
+    "@cloudsnorkel/cdk-github-runners.RunnerImage": {
       "assembly": "@cloudsnorkel/cdk-github-runners",
       "datatype": true,
       "docs": {
         "stability": "experimental"
       },
-      "fqn": "@cloudsnorkel/cdk-github-runners.LambdaRunnerProps",
-      "interfaces": [
-        "@cloudsnorkel/cdk-github-runners.RunnerProviderProps"
-      ],
+      "fqn": "@cloudsnorkel/cdk-github-runners.RunnerImage",
       "kind": "interface",
       "locationInModule": {
-        "filename": "src/providers/lambda.ts",
-        "line": 14
+        "filename": "src/providers/common.ts",
+        "line": 91
       },
-      "name": "LambdaRunnerProps",
+      "name": "RunnerImage",
       "properties": [
         {
           "abstract": true,
           "docs": {
-            "default": "10 GiB",
             "stability": "experimental",
-            "summary": "The size of the function’s /tmp directory in MiB."
+            "summary": "Architecture of the image."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/lambda.ts",
-            "line": 37
+            "filename": "src/providers/common.ts",
+            "line": 112
           },
-          "name": "ephemeralStorageSize",
-          "optional": true,
+          "name": "architecture",
           "type": {
-            "fqn": "aws-cdk-lib.Size"
+            "fqn": "@cloudsnorkel/cdk-github-runners.Architecture"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "'lambda'",
+            "remarks": "WARNING: the digest might change when the builder automatically rebuilds the image on a schedule. Do not expect for this digest to stay the same between deploys.",
             "stability": "experimental",
-            "summary": "GitHub Actions label used for this provider."
+            "summary": "Image digest for providers that need to know the digest like Lambda."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/lambda.ts",
-            "line": 20
+            "filename": "src/providers/common.ts",
+            "line": 107
           },
-          "name": "label",
-          "optional": true,
+          "name": "imageDigest",
           "type": {
             "primitive": "string"
           }
@@ -4239,97 +5210,53 @@
         {
           "abstract": true,
           "docs": {
-            "default": "2048",
-            "remarks": "Lambda uses this value to proportionally allocate the amount of CPU\npower. For more information, see Resource Model in the AWS Lambda\nDeveloper Guide.",
-            "stability": "experimental",
-            "summary": "The amount of memory, in MB, that is allocated to your Lambda function."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/providers/lambda.ts",
-            "line": 30
-          },
-          "name": "memorySize",
-          "optional": true,
-          "type": {
-            "primitive": "number"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "default": "public lambda with no security group",
-            "stability": "experimental",
-            "summary": "Security Group to assign to this instance."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/providers/lambda.ts",
-            "line": 60
-          },
-          "name": "securityGroup",
-          "optional": true,
-          "type": {
-            "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
-          }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "default": "no subnet",
             "stability": "experimental",
-            "summary": "Where to place the network interfaces within the VPC."
+            "summary": "ECR repository containing the image."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/lambda.ts",
-            "line": 67
+            "filename": "src/providers/common.ts",
+            "line": 95
           },
-          "name": "subnetSelection",
-          "optional": true,
+          "name": "imageRepository",
           "type": {
-            "fqn": "aws-cdk-lib.aws_ec2.SubnetSelection"
+            "fqn": "aws-cdk-lib.aws_ecr.IRepository"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "Duration.minutes(15)",
-            "remarks": "Because the execution time affects cost, set this value\nbased on the function's expected execution time.",
             "stability": "experimental",
-            "summary": "The function execution time (in seconds) after which Lambda terminates the function."
+            "summary": "Static image tag where the image will be pushed."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/lambda.ts",
-            "line": 46
+            "filename": "src/providers/common.ts",
+            "line": 100
           },
-          "name": "timeout",
-          "optional": true,
+          "name": "imageTag",
           "type": {
-            "fqn": "aws-cdk-lib.Duration"
+            "primitive": "string"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "no VPC",
             "stability": "experimental",
-            "summary": "VPC to launch the runners in."
+            "summary": "OS type of the image."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/lambda.ts",
-            "line": 53
+            "filename": "src/providers/common.ts",
+            "line": 117
           },
-          "name": "vpc",
-          "optional": true,
+          "name": "os",
           "type": {
-            "fqn": "aws-cdk-lib.aws_ec2.IVpc"
+            "fqn": "@cloudsnorkel/cdk-github-runners.Os"
           }
         }
       ],
-      "symbolId": "src/providers/lambda:LambdaRunnerProps"
+      "symbolId": "src/providers/common:RunnerImage"
     },
     "@cloudsnorkel/cdk-github-runners.RunnerProviderProps": {
       "assembly": "@cloudsnorkel/cdk-github-runners",
@@ -4342,7 +5269,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/providers/common.ts",
-        "line": 32
+        "line": 143
       },
       "name": "RunnerProviderProps",
       "properties": [
@@ -4357,31 +5284,13 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/common.ts",
-            "line": 47
+            "line": 151
           },
           "name": "logRetention",
           "optional": true,
           "type": {
             "fqn": "aws-cdk-lib.aws_logs.RetentionDays"
           }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "default": "latest version available",
-            "stability": "experimental",
-            "summary": "Version of GitHub Runners to install."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/providers/common.ts",
-            "line": 38
-          },
-          "name": "runnerVersion",
-          "optional": true,
-          "type": {
-            "fqn": "@cloudsnorkel/cdk-github-runners.RunnerVersion"
-          }
         }
       ],
       "symbolId": "src/providers/common:RunnerProviderProps"
@@ -4398,7 +5307,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/providers/common.ts",
-        "line": 59
+        "line": 163
       },
       "name": "RunnerRuntimeParameters",
       "properties": [
@@ -4412,7 +5321,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/common.ts",
-            "line": 73
+            "line": 177
           },
           "name": "githubDomainPath",
           "type": {
@@ -4428,7 +5337,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/common.ts",
-            "line": 78
+            "line": 182
           },
           "name": "ownerPath",
           "type": {
@@ -4444,7 +5353,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/common.ts",
-            "line": 83
+            "line": 187
           },
           "name": "repoPath",
           "type": {
@@ -4461,7 +5370,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/common.ts",
-            "line": 68
+            "line": 172
           },
           "name": "runnerNamePath",
           "type": {
@@ -4477,7 +5386,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/common.ts",
-            "line": 63
+            "line": 167
           },
           "name": "runnerTokenPath",
           "type": {
@@ -4598,7 +5507,7 @@
         },
         "locationInModule": {
           "filename": "src/secrets.ts",
-          "line": 29
+          "line": 34
         },
         "parameters": [
           {
@@ -4654,6 +5563,22 @@
             "fqn": "aws-cdk-lib.aws_secretsmanager.Secret"
           }
         },
+        {
+          "docs": {
+            "remarks": "Should be empty after setup has been completed.",
+            "stability": "experimental",
+            "summary": "Setup secret used to authenticate user for our setup wizard."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/secrets.ts",
+            "line": 32
+          },
+          "name": "setup",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_secretsmanager.Secret"
+          }
+        },
         {
           "docs": {
             "stability": "experimental",
@@ -4671,8 +5596,150 @@
         }
       ],
       "symbolId": "src/secrets:Secrets"
+    },
+    "@cloudsnorkel/cdk-github-runners.StaticRunnerImage": {
+      "assembly": "@cloudsnorkel/cdk-github-runners",
+      "docs": {
+        "stability": "experimental",
+        "summary": "Helper class with methods to use static images that are built outside the context of this project."
+      },
+      "fqn": "@cloudsnorkel/cdk-github-runners.StaticRunnerImage",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        }
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/providers/image-builders/static.ts",
+        "line": 10
+      },
+      "methods": [
+        {
+          "docs": {
+            "remarks": "The image must already have GitHub Actions runner installed. You are responsible to update it and remove it when done.\n\nWe create a CodeBuild image builder behind the scenes to copy the image over to ECR. This helps avoid Docker Hub rate limits and prevent failures.",
+            "stability": "experimental",
+            "summary": "Create a builder from an existing Docker Hub image."
+          },
+          "locationInModule": {
+            "filename": "src/providers/image-builders/static.ts",
+            "line": 44
+          },
+          "name": "fromDockerHub",
+          "parameters": [
+            {
+              "name": "scope",
+              "type": {
+                "fqn": "constructs.Construct"
+              }
+            },
+            {
+              "name": "id",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "Docker Hub image with optional tag."
+              },
+              "name": "image",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "image architecture."
+              },
+              "name": "architecture",
+              "optional": true,
+              "type": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.Architecture"
+              }
+            },
+            {
+              "docs": {
+                "summary": "image OS."
+              },
+              "name": "os",
+              "optional": true,
+              "type": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.Os"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@cloudsnorkel/cdk-github-runners.IImageBuilder"
+            }
+          },
+          "static": true
+        },
+        {
+          "docs": {
+            "remarks": "The image must already have GitHub Actions runner installed. You are responsible to update it and remove it when done.",
+            "stability": "experimental",
+            "summary": "Create a builder (that doesn't actually build anything) from an existing image in an existing repository."
+          },
+          "locationInModule": {
+            "filename": "src/providers/image-builders/static.ts",
+            "line": 19
+          },
+          "name": "fromEcrRepository",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "ECR repository."
+              },
+              "name": "repository",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_ecr.IRepository"
+              }
+            },
+            {
+              "docs": {
+                "summary": "image tag."
+              },
+              "name": "tag",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "image architecture."
+              },
+              "name": "architecture",
+              "optional": true,
+              "type": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.Architecture"
+              }
+            },
+            {
+              "docs": {
+                "summary": "image OS."
+              },
+              "name": "os",
+              "optional": true,
+              "type": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.Os"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@cloudsnorkel/cdk-github-runners.IImageBuilder"
+            }
+          },
+          "static": true
+        }
+      ],
+      "name": "StaticRunnerImage",
+      "symbolId": "src/providers/image-builders/static:StaticRunnerImage"
     }
   },
-  "version": "0.1.0",
-  "fingerprint": "2A3zR2Q2D489E7HuDGnD0EAd8U4pPE57LnsmAArgvA8="
+  "version": "0.3.0",
+  "fingerprint": "BbcPeU/UMTYhijuLgnABdbWc76bh1KhE/IYBv9sCMz8="
 }