@cloudsnorkel/cdk-github-runners 0.2.0 → 0.3.2

package/.jsii

@@ -2971,7 +2971,7 @@
     "stability": "experimental"
   },
   "homepage": "https://github.com/CloudSnorkel/cdk-github-runners.git",
-  "jsiiVersion": "1.60.1 (build 2799dc8)",
+  "jsiiVersion": "1.62.0 (build 293ac17)",
   "keywords": [
     "aws",
     "aws-cdk",
@@ -2995,7 +2995,7 @@
   },
   "name": "@cloudsnorkel/cdk-github-runners",
   "readme": {
-    "markdown": "# GitHub Self-Hosted Runners CDK Constructs\n\n[![NPM](https://img.shields.io/npm/v/@cloudsnorkel/cdk-github-runners?label=npm&logo=npm)][6]\n[![PyPI](https://img.shields.io/pypi/v/cloudsnorkel.cdk-github-runners?label=pypi&logo=pypi)][7]\n[![Maven Central](https://img.shields.io/maven-central/v/com.cloudsnorkel/cdk.github.runners.svg?label=Maven%20Central&logo=java)][8]\n[![Go](https://img.shields.io/github/v/tag/CloudSnorkel/cdk-github-runners?color=red&label=go&logo=go)][11]\n[![Nuget](https://img.shields.io/nuget/v/CloudSnorkel.Cdk.Github.Runners?color=red&&logo=nuget)][12]\n[![Release](https://github.com/CloudSnorkel/cdk-github-runners/actions/workflows/release.yml/badge.svg)](https://github.com/CloudSnorkel/cdk-github-runners/actions/workflows/release.yml)\n[![License](https://img.shields.io/badge/license-Apache--2.0-blue)](https://github.com/CloudSnorkel/cdk-github-runners/blob/main/LICENSE)\n\nUse this CDK construct to create ephemeral [self-hosted GitHub runners][1] on-demand inside your AWS account.\n\n* Easy to configure GitHub integration with a web-based interface\n* Customizable runners with decent defaults\n* Multiple runner configurations controlled by labels\n* Everything fully hosted in your account\n\nSelf-hosted runners in AWS are useful when:\n\n* You need easy access to internal resources in your actions\n* You want to pre-install some software for your actions\n* You want to provide some basic AWS API access (but [aws-actions/configure-aws-credentials][2] has more security controls)\n\nEphemeral (or on-demand) runners are the [recommended way by GitHub][14] for auto-scaling, and they make sure all jobs run with a clean image. Runners are started on-demand. You don't pay unless a job is running.\n\n## API\n\nThe best way to browse API documentation is on [Constructs Hub][13]. It is available in all supported programming languages.\n\n## Providers\n\nA runner provider creates compute resources on-demand and uses [actions/runner][5] to start a runner.\n\n|                | CodeBuild                | Fargate       | Lambda        |\n|----------------|--------------------------|---------------|---------------|\n| **Time limit** | 8 hours                  | Unlimited     | 15 minutes    |\n| **vCPUs**      | 2, 4, 8, or 72           | 0.25 to 4     | 1 to 6        |\n| **RAM**        | 3gb, 7gb, 15gb, or 145gb | 512mb to 30gb | 128mb to 10gb |\n| **Storage**    | 50gb to 824gb            | 20gb to 200gb | Up to 10gb    |\n| **sudo**       | ✔                        | ✔             | ❌             |\n| **Docker**     | ✔                        | ❌             | ❌             |\n| **Spot**       | ❌                        | ✔             | ❌             |\n\nThe best provider to use mostly depends on your current infrastructure. When in doubt, CodeBuild is always a good choice. Execution history and logs are easy to view, and it has no restrictive limits unless you need to run for more than 8 hours.\n\nYou can also create your own provider by implementing `IRunnerProvider`.\n\n## Installation\n\n1. Confirm you're using CDK v2\n2. Install the appropriate package\n   1. [Python][6]\n      ```\n      pip install cloudsnorkel.cdk-github-runners\n      ```\n   2. [TypeScript or JavaScript][7]\n      ```\n      npm i @cloudsnorkel/cdk-github-runners\n      ```\n   3. [Java][8]\n      ```xml\n      <dependency>\n      <groupId>com.cloudsnorkel</groupId>\n      <artifactId>cdk.github.runners</artifactId>\n      </dependency>\n      ```\n   4. [Go][11]\n      ```\n      go get github.com/CloudSnorkel/cdk-github-runners-go/cloudsnorkelcdkgithubrunners\n      ```\n   5. [.NET][12]\n      ```\n      dotnet add package CloudSnorkel.Cdk.Github.Runners\n      ```\n3. Use `GitHubRunners` construct in your code (starting with default arguments is fine)\n4. Deploy your stack\n5. Look for the status command output similar to `aws --region us-east-1 lambda invoke --function-name status-XYZ123 status.json`\n6. Execute the status command (you may need to specify `--profile` too) and open the resulting `status.json` file\n7. Open the URL in `github.setup.url` from `status.json` or [manually setup GitHub](SETUP_GITHUB.md) integration as an app or with personal access token\n8. Run status command again to confirm `github.auth.status` and `github.webhook.status` are OK\n9. Trigger a GitHub action that has a `self-hosted` label with `runs-on: [self-hosted, linux, codebuild]` or similar\n10. If the action is not successful, see [troubleshooting](#Troubleshooting)\n\n[![Demo](demo-thumbnail.jpg)](https://youtu.be/wlyv_3V8lIw)\n\n## Customizing\n\nThe default providers configured by `GitHubRunners` are useful for testing but probably not too much for actual production work. They run in the default VPC or no VPC and have no added IAM permissions. You would usually want to configure the providers yourself.\n\nFor example:\n\n```typescript\nimport * as cdk from 'aws-cdk-lib';\nimport { aws_ec2 as ec2, aws_s3 as s3 } from 'aws-cdk-lib';\nimport { GitHubRunners, CodeBuildRunner } from '@cloudsnorkel/cdk-github-runners';\n\nconst app = new cdk.App();\nconst stack = new cdk.Stack(\n  app,\n  'github-runners-test',\n  {\n     env: {\n        account: process.env.CDK_DEFAULT_ACCOUNT,\n        region: process.env.CDK_DEFAULT_REGION,\n     },\n  },\n);\n\nconst vpc = ec2.Vpc.fromLookup(stack, 'vpc', { vpcId: 'vpc-1234567' });\nconst runnerSg = new ec2.SecurityGroup(stack, 'runner security group', { vpc: vpc });\nconst dbSg = ec2.SecurityGroup.fromSecurityGroupId(stack, 'database security group', 'sg-1234567');\nconst bucket = new s3.Bucket(stack, 'runner bucket');\n\n// create a custom CodeBuild provider\nconst myProvider = new CodeBuildRunner(\n  stack, 'codebuild runner',\n  {\n     label: 'my-codebuild',\n     vpc: vpc,\n     securityGroup: runnerSg,\n  },\n);\n// grant some permissions to the provider\nbucket.grantReadWrite(myProvider);\ndbSg.connections.allowFrom(runnerSg, ec2.Port.tcp(3306), 'allow runners to connect to MySQL database');\n\n// create the runner infrastructure\nnew GitHubRunners(\n  stack,\n  'runners',\n  {\n    providers: [myProvider],\n  }\n);\n\napp.synth();\n```\n\n## Architecture\n\n![Architecture diagram](architecture.svg)\n\n## Troubleshooting\n\n1. Always start with the status function, make sure no errors are reported, and confirm all status codes are OK\n2. Confirm the webhook Lambda was called by visiting the URL in `troubleshooting.webhookHandlerUrl` from `status.json`\n   1. If it's not called or logs errors, confirm the webhook settings on the GitHub side\n   2. If you see too many errors, make sure you're only sending `workflow_job` events\n3. When using GitHub app, make sure there are active installation in `github.auth.app.installations`\n4. Check execution details of the orchestrator step function by visiting the URL in `troubleshooting.stepFunctionUrl` from `status.json`\n   1. Use the details tab to find the specific execution of the provider (Lambda, CodeBuild, Fargate, etc.)\n   2. Every step function execution should be successful, even if the runner action inside it failed\n\n## Other Options\n\n1. [philips-labs/terraform-aws-github-runner][3] if you're using Terraform\n2. [actions-runner-controller/actions-runner-controller][4] if you're using Kubernetes\n\n\n[1]: https://docs.github.com/en/actions/hosting-your-own-runners/about-self-hosted-runners\n[2]: https://github.com/marketplace/actions/configure-aws-credentials-action-for-github-actions\n[3]: https://github.com/philips-labs/terraform-aws-github-runner\n[4]: https://github.com/actions-runner-controller/actions-runner-controller\n[5]: https://github.com/actions/runner\n[6]: https://www.npmjs.com/package/@cloudsnorkel/cdk-github-runners\n[7]: https://pypi.org/project/cloudsnorkel.cdk-github-runners\n[8]: https://search.maven.org/search?q=g:%22com.cloudsnorkel%22%20AND%20a:%22cdk.github.runners%22\n[9]: https://docs.github.com/en/developers/apps/getting-started-with-apps/about-apps\n[10]: https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token\n[11]: https://pkg.go.dev/github.com/CloudSnorkel/cdk-github-runners-go/cloudsnorkelcdkgithubrunners\n[12]: https://www.nuget.org/packages/CloudSnorkel.Cdk.Github.Runners/\n[13]: https://constructs.dev/packages/@cloudsnorkel/cdk-github-runners/\n[14]: https://docs.github.com/en/actions/hosting-your-own-runners/autoscaling-with-self-hosted-runners#using-ephemeral-runners-for-autoscaling"
+    "markdown": "# GitHub Self-Hosted Runners CDK Constructs\n\n[![NPM](https://img.shields.io/npm/v/@cloudsnorkel/cdk-github-runners?label=npm&logo=npm)][7]\n[![PyPI](https://img.shields.io/pypi/v/cloudsnorkel.cdk-github-runners?label=pypi&logo=pypi)][6]\n[![Maven Central](https://img.shields.io/maven-central/v/com.cloudsnorkel/cdk.github.runners.svg?label=Maven%20Central&logo=java)][8]\n[![Go](https://img.shields.io/github/v/tag/CloudSnorkel/cdk-github-runners?color=red&label=go&logo=go)][11]\n[![Nuget](https://img.shields.io/nuget/v/CloudSnorkel.Cdk.Github.Runners?color=red&&logo=nuget)][12]\n[![Release](https://github.com/CloudSnorkel/cdk-github-runners/actions/workflows/release.yml/badge.svg)](https://github.com/CloudSnorkel/cdk-github-runners/actions/workflows/release.yml)\n[![License](https://img.shields.io/badge/license-Apache--2.0-blue)](https://github.com/CloudSnorkel/cdk-github-runners/blob/main/LICENSE)\n\nUse this CDK construct to create ephemeral [self-hosted GitHub runners][1] on-demand inside your AWS account.\n\n* Easy to configure GitHub integration with a web-based interface\n* Customizable runners with decent defaults\n* Multiple runner configurations controlled by labels\n* Everything fully hosted in your account\n\nSelf-hosted runners in AWS are useful when:\n\n* You need easy access to internal resources in your actions\n* You want to pre-install some software for your actions\n* You want to provide some basic AWS API access (but [aws-actions/configure-aws-credentials][2] has more security controls)\n\nEphemeral (or on-demand) runners are the [recommended way by GitHub][14] for auto-scaling, and they make sure all jobs run with a clean image. Runners are started on-demand. You don't pay unless a job is running.\n\n## API\n\nThe best way to browse API documentation is on [Constructs Hub][13]. It is available in all supported programming languages.\n\n## Providers\n\nA runner provider creates compute resources on-demand and uses [actions/runner][5] to start a runner.\n\n|                  | CodeBuild                | Fargate        | Lambda         |\n|------------------|--------------------------|----------------|----------------|\n| **Time limit**   | 8 hours                  | Unlimited      | 15 minutes     |\n| **vCPUs**        | 2, 4, 8, or 72           | 0.25 to 4      | 1 to 6         |\n| **RAM**          | 3gb, 7gb, 15gb, or 145gb | 512mb to 30gb  | 128mb to 10gb  |\n| **Storage**      | 50gb to 824gb            | 20gb to 200gb  | Up to 10gb     |\n| **Architecture** | x86_64, ARM64            | x86_64, ARM64  | x86_64, ARM64  |\n| **sudo**         | ✔                        | ✔              | ❌              |\n| **Docker**       | ✔                        | ❌              | ❌              |\n| **Spot pricing** | ❌                        | ✔              | ❌              |\n\nThe best provider to use mostly depends on your current infrastructure. When in doubt, CodeBuild is always a good choice. Execution history and logs are easy to view, and it has no restrictive limits unless you need to run for more than 8 hours.\n\nYou can also create your own provider by implementing `IRunnerProvider`.\n\n## Installation\n\n1. Confirm you're using CDK v2\n2. Install the appropriate package\n   1. [Python][6]\n      ```\n      pip install cloudsnorkel.cdk-github-runners\n      ```\n   2. [TypeScript or JavaScript][7]\n      ```\n      npm i @cloudsnorkel/cdk-github-runners\n      ```\n   3. [Java][8]\n      ```xml\n      <dependency>\n      <groupId>com.cloudsnorkel</groupId>\n      <artifactId>cdk.github.runners</artifactId>\n      </dependency>\n      ```\n   4. [Go][11]\n      ```\n      go get github.com/CloudSnorkel/cdk-github-runners-go/cloudsnorkelcdkgithubrunners\n      ```\n   5. [.NET][12]\n      ```\n      dotnet add package CloudSnorkel.Cdk.Github.Runners\n      ```\n3. Use `GitHubRunners` construct in your code (starting with default arguments is fine)\n4. Deploy your stack\n5. Look for the status command output similar to `aws --region us-east-1 lambda invoke --function-name status-XYZ123 status.json`\n6. Execute the status command (you may need to specify `--profile` too) and open the resulting `status.json` file\n7. Open the URL in `github.setup.url` from `status.json` or [manually setup GitHub](SETUP_GITHUB.md) integration as an app or with personal access token\n8. Run status command again to confirm `github.auth.status` and `github.webhook.status` are OK\n9. Trigger a GitHub action that has a `self-hosted` label with `runs-on: [self-hosted, linux, codebuild]` or similar\n10. If the action is not successful, see [troubleshooting](#Troubleshooting)\n\n[![Demo](demo-thumbnail.jpg)](https://youtu.be/wlyv_3V8lIw)\n\n## Customizing\n\nThe default providers configured by `GitHubRunners` are useful for testing but probably not too much for actual production work. They run in the default VPC or no VPC and have no added IAM permissions. You would usually want to configure the providers yourself.\n\nFor example:\n\n```typescript\nlet vpc: ec2.Vpc;\nlet runnerSg: ec2.SecurityGroup;\nlet dbSg: ec2.SecurityGroup;\nlet bucket: s3.Bucket;\n\n// create a custom CodeBuild provider\nconst myProvider = new CodeBuildRunner(this, 'codebuild runner', {\n    label: 'my-codebuild',\n    vpc: vpc,\n    securityGroup: runnerSg,\n});\n// grant some permissions to the provider\nbucket.grantReadWrite(myProvider);\ndbSg.connections.allowFrom(runnerSg, ec2.Port.tcp(3306), 'allow runners to connect to MySQL database');\n\n// create the runner infrastructure\nnew GitHubRunners(this, 'runners', {\n    providers: [myProvider],\n});\n```\n\nAnother way to customize runners is by modifying the image used to spin them up. The image contains the [runner][5], any required dependencies, and integration code with the provider. You may choose to customize this image by adding more packages, for example.\n\n```typescript\nconst myBuilder = new CodeBuildImageBuilder(this, 'image builder', {\n   dockerfilePath: FargateProvider.LINUX_X64_DOCKERFILE_PATH,\n   runnerVersion: RunnerVersion.specific('2.291.0'),\n   rebuildInterval: Duration.days(14),\n});\nmyBuilder.setBuildArg('EXTRA_PACKAGES', 'nginx xz-utils');\n\nconst myProvider = new FargateProvider(this, 'fargate runner', {\n   label: 'customized-fargate',\n   vpc: vpc,\n   securityGroup: runnerSg,\n});\n\n// create the runner infrastructure\nnew GitHubRunners(stack, 'runners', {\n   providers: [myProvider],\n});\n```\n\nYour workflow will then look like:\n\n```yaml\nname: self-hosted example\non: push\njobs:\n  self-hosted:\n    runs-on: [self-hosted, customized-fargate]\n    steps:\n      - run: echo hello world\n```\n\n## Architecture\n\n![Architecture diagram](architecture.svg)\n\n## Troubleshooting\n\n1. Always start with the status function, make sure no errors are reported, and confirm all status codes are OK\n2. Confirm the webhook Lambda was called by visiting the URL in `troubleshooting.webhookHandlerUrl` from `status.json`\n   1. If it's not called or logs errors, confirm the webhook settings on the GitHub side\n   2. If you see too many errors, make sure you're only sending `workflow_job` events\n3. When using GitHub app, make sure there are active installation in `github.auth.app.installations`\n4. Check execution details of the orchestrator step function by visiting the URL in `troubleshooting.stepFunctionUrl` from `status.json`\n   1. Use the details tab to find the specific execution of the provider (Lambda, CodeBuild, Fargate, etc.)\n   2. Every step function execution should be successful, even if the runner action inside it failed\n\n## Other Options\n\n1. [philips-labs/terraform-aws-github-runner][3] if you're using Terraform\n2. [actions-runner-controller/actions-runner-controller][4] if you're using Kubernetes\n\n\n[1]: https://docs.github.com/en/actions/hosting-your-own-runners/about-self-hosted-runners\n[2]: https://github.com/marketplace/actions/configure-aws-credentials-action-for-github-actions\n[3]: https://github.com/philips-labs/terraform-aws-github-runner\n[4]: https://github.com/actions-runner-controller/actions-runner-controller\n[5]: https://github.com/actions/runner\n[6]: https://pypi.org/project/cloudsnorkel.cdk-github-runners\n[7]: https://www.npmjs.com/package/@cloudsnorkel/cdk-github-runners\n[8]: https://search.maven.org/search?q=g:%22com.cloudsnorkel%22%20AND%20a:%22cdk.github.runners%22\n[9]: https://docs.github.com/en/developers/apps/getting-started-with-apps/about-apps\n[10]: https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token\n[11]: https://pkg.go.dev/github.com/CloudSnorkel/cdk-github-runners-go/cloudsnorkelcdkgithubrunners\n[12]: https://www.nuget.org/packages/CloudSnorkel.Cdk.Github.Runners/\n[13]: https://constructs.dev/packages/@cloudsnorkel/cdk-github-runners/\n[14]: https://docs.github.com/en/actions/hosting-your-own-runners/autoscaling-with-self-hosted-runners#using-ephemeral-runners-for-autoscaling\n"
   },
   "repository": {
     "type": "git",
@@ -3026,6 +3026,574 @@
     }
   },
   "types": {
+    "@cloudsnorkel/cdk-github-runners.Architecture": {
+      "assembly": "@cloudsnorkel/cdk-github-runners",
+      "docs": {
+        "stability": "experimental",
+        "summary": "CPU architecture enum for an image."
+      },
+      "fqn": "@cloudsnorkel/cdk-github-runners.Architecture",
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/providers/common.ts",
+        "line": 32
+      },
+      "methods": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Checks if the given architecture is the same as this one."
+          },
+          "locationInModule": {
+            "filename": "src/providers/common.ts",
+            "line": 55
+          },
+          "name": "is",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "architecture to compare."
+              },
+              "name": "arch",
+              "type": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.Architecture"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "primitive": "boolean"
+            }
+          }
+        }
+      ],
+      "name": "Architecture",
+      "properties": [
+        {
+          "const": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "ARM64."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/common.ts",
+            "line": 36
+          },
+          "name": "ARM64",
+          "static": true,
+          "type": {
+            "fqn": "@cloudsnorkel/cdk-github-runners.Architecture"
+          }
+        },
+        {
+          "const": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "X86_64."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/common.ts",
+            "line": 41
+          },
+          "name": "X86_64",
+          "static": true,
+          "type": {
+            "fqn": "@cloudsnorkel/cdk-github-runners.Architecture"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/common.ts",
+            "line": 47
+          },
+          "name": "name",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "src/providers/common:Architecture"
+    },
+    "@cloudsnorkel/cdk-github-runners.CodeBuildImageBuilder": {
+      "assembly": "@cloudsnorkel/cdk-github-runners",
+      "base": "constructs.Construct",
+      "docs": {
+        "remarks": "Builders can be used with runner providers.\n\nEach builder re-runs automatically at a set interval to make sure the images contain the latest versions of everything.\n\nYou can create an instance of this construct to customize the image used to spin-up runners. Each provider has its own requirements for what an image should do. That's why they each provide their own Dockerfile.\n\nFor example, to set a specific runner version, rebuild the image every 2 weeks, and add a few packages for the Fargate provider, use:\n\n```\nconst builder = new CodeBuildImageBuilder(this, 'Builder', {\n     dockerfilePath: FargateProvider.LINUX_X64_DOCKERFILE_PATH,\n     runnerVersion: RunnerVersion.specific('2.293.0'),\n     rebuildInterval: Duration.days(14),\n});\nbuilder.setBuildArg('EXTRA_PACKAGES', 'nginx xz-utils');\nnew FargateProvider(this, 'Fargate provider', {\n     label: 'customized-fargate',\n     imageBuilder: builder,\n});\n```",
+        "stability": "experimental",
+        "summary": "An image builder that uses CodeBuild to build Docker images pre-baked with all the GitHub Actions runner requirements."
+      },
+      "fqn": "@cloudsnorkel/cdk-github-runners.CodeBuildImageBuilder",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        },
+        "locationInModule": {
+          "filename": "src/providers/image-builders/codebuild.ts",
+          "line": 164
+        },
+        "parameters": [
+          {
+            "name": "scope",
+            "type": {
+              "fqn": "constructs.Construct"
+            }
+          },
+          {
+            "name": "id",
+            "type": {
+              "primitive": "string"
+            }
+          },
+          {
+            "name": "props",
+            "type": {
+              "fqn": "@cloudsnorkel/cdk-github-runners.CodeBuildImageBuilderProps"
+            }
+          }
+        ]
+      },
+      "interfaces": [
+        "@cloudsnorkel/cdk-github-runners.IImageBuilder"
+      ],
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/providers/image-builders/codebuild.ts",
+        "line": 149
+      },
+      "methods": [
+        {
+          "docs": {
+            "remarks": "All first party Dockerfiles support this. Others may not.",
+            "stability": "experimental",
+            "summary": "Add extra trusted certificates. This helps deal with self-signed certificates for GitHub Enterprise Server."
+          },
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 271
+          },
+          "name": "addExtraCertificates",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "path to directory containing a file called certs.pem containing all the required certificates."
+              },
+              "name": "path",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Uploads a folder to the build server at a given folder name."
+          },
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 205
+          },
+          "name": "addFiles",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "path to source directory."
+              },
+              "name": "sourcePath",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "name of destination folder."
+              },
+              "name": "destName",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Add a policy statement to the builder to access resources required to the image build."
+          },
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 257
+          },
+          "name": "addPolicyStatement",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "IAM policy statement."
+              },
+              "name": "statement",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.PolicyStatement"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Adds a command that runs after `docker build` and `docker push`."
+          },
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 232
+          },
+          "name": "addPostBuildCommand",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "command to add."
+              },
+              "name": "command",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Adds a command that runs before `docker build`."
+          },
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 220
+          },
+          "name": "addPreBuildCommand",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "command to add."
+              },
+              "name": "command",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Called by IRunnerProvider to finalize settings and create the image builder."
+          },
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 281
+          },
+          "name": "bind",
+          "overrides": "@cloudsnorkel/cdk-github-runners.IImageBuilder",
+          "returns": {
+            "type": {
+              "fqn": "@cloudsnorkel/cdk-github-runners.RunnerImage"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "See the documentation for the Dockerfile you're using for a list of supported build arguments.",
+            "stability": "experimental",
+            "summary": "Adds a build argument for Docker."
+          },
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 245
+          },
+          "name": "setBuildArg",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "build argument name."
+              },
+              "name": "name",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "build argument value."
+              },
+              "name": "value",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
+        }
+      ],
+      "name": "CodeBuildImageBuilder",
+      "properties": [
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 164
+          },
+          "name": "props",
+          "type": {
+            "fqn": "@cloudsnorkel/cdk-github-runners.CodeBuildImageBuilderProps"
+          }
+        }
+      ],
+      "symbolId": "src/providers/image-builders/codebuild:CodeBuildImageBuilder"
+    },
+    "@cloudsnorkel/cdk-github-runners.CodeBuildImageBuilderProps": {
+      "assembly": "@cloudsnorkel/cdk-github-runners",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Properties for CodeBuildImageBuilder construct."
+      },
+      "fqn": "@cloudsnorkel/cdk-github-runners.CodeBuildImageBuilderProps",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/providers/image-builders/codebuild.ts",
+        "line": 34
+      },
+      "name": "CodeBuildImageBuilderProps",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "It can be a path to a Dockerfile, a folder containing a Dockerfile, or a zip file containing a Dockerfile.",
+            "stability": "experimental",
+            "summary": "Path to Dockerfile to be built."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 52
+          },
+          "name": "dockerfilePath",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "Architecture.X86_64",
+            "stability": "experimental",
+            "summary": "Image architecture."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 40
+          },
+          "name": "architecture",
+          "optional": true,
+          "type": {
+            "fqn": "@cloudsnorkel/cdk-github-runners.Architecture"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "{@link ComputeType#SMALL}",
+            "remarks": "See the {@link ComputeType} enum for the possible values.",
+            "stability": "experimental",
+            "summary": "The type of compute to use for this build."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 97
+          },
+          "name": "computeType",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_codebuild.ComputeType"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "RemovalPolicy.DESTROY",
+            "remarks": "If deployment fails on the custom resource, try setting this to `RemovalPolicy.RETAIN`. This way the CodeBuild logs can still be viewed, and you can see why the build failed.\n\nWe try to not leave anything behind when removed. But sometimes a log staying behind is useful.",
+            "stability": "experimental",
+            "summary": "Removal policy for logs of image builds."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 124
+          },
+          "name": "logRemovalPolicy",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.RemovalPolicy"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "logs.RetentionDays.ONE_MONTH",
+            "remarks": "When updating\nthis property, unsetting it doesn't remove the log retention policy. To\nremove the retention policy, set the value to `INFINITE`.",
+            "stability": "experimental",
+            "summary": "The number of days log events are kept in CloudWatch Logs."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 115
+          },
+          "name": "logRetention",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_logs.RetentionDays"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "OS.LINUX",
+            "stability": "experimental",
+            "summary": "Image OS."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 47
+          },
+          "name": "os",
+          "optional": true,
+          "type": {
+            "fqn": "@cloudsnorkel/cdk-github-runners.Os"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "Duration.days(7)",
+            "remarks": "Useful for keeping the image up-do-date with the latest GitHub runner version and latest OS updates.\n\nSet to zero to disable.",
+            "stability": "experimental",
+            "summary": "Schedule the image to be rebuilt every given interval."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 68
+          },
+          "name": "rebuildInterval",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.Duration"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "latest version available",
+            "stability": "experimental",
+            "summary": "Version of GitHub Runners to install."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 59
+          },
+          "name": "runnerVersion",
+          "optional": true,
+          "type": {
+            "fqn": "@cloudsnorkel/cdk-github-runners.RunnerVersion"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "public project with no security group",
+            "stability": "experimental",
+            "summary": "Security Group to assign to this instance."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 82
+          },
+          "name": "securityGroup",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "no subnet",
+            "stability": "experimental",
+            "summary": "Where to place the network interfaces within the VPC."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 89
+          },
+          "name": "subnetSelection",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.SubnetSelection"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "Duration.hours(1)",
+            "remarks": "For valid values, see the timeoutInMinutes field in the AWS\nCodeBuild User Guide.",
+            "stability": "experimental",
+            "summary": "The number of minutes after which AWS CodeBuild stops the build if it's not complete."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 106
+          },
+          "name": "timeout",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.Duration"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "no VPC",
+            "stability": "experimental",
+            "summary": "VPC to launch the runners in."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/codebuild.ts",
+            "line": 75
+          },
+          "name": "vpc",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.IVpc"
+          }
+        }
+      ],
+      "symbolId": "src/providers/image-builders/codebuild:CodeBuildImageBuilderProps"
+    },
     "@cloudsnorkel/cdk-github-runners.CodeBuildRunner": {
       "assembly": "@cloudsnorkel/cdk-github-runners",
       "base": "constructs.Construct",
@@ -3041,7 +3609,7 @@
         },
         "locationInModule": {
           "filename": "src/providers/codebuild.ts",
-          "line": 98
+          "line": 133
         },
         "parameters": [
           {
@@ -3070,7 +3638,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/providers/codebuild.ts",
-        "line": 72
+        "line": 81
       },
       "methods": [
         {
@@ -3081,7 +3649,7 @@
           },
           "locationInModule": {
             "filename": "src/providers/codebuild.ts",
-            "line": 177
+            "line": 233
           },
           "name": "getStepFunctionTask",
           "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
@@ -3105,6 +3673,42 @@
       ],
       "name": "CodeBuildRunner",
       "properties": [
+        {
+          "const": true,
+          "docs": {
+            "remarks": "Use this Dockerfile unless you need to customize it further than allowed by hooks.\n\nAvailable build arguments that can be set in the image builder:\n* `BASE_IMAGE` sets the `FROM` line. This should be an Ubuntu compatible image.\n* `EXTRA_PACKAGES` can be used to install additional packages.\n* `DOCKER_CHANNEL` overrides the channel from which Docker will be downloaded. Defaults to `\"stsable\"`.\n* `DIND_COMMIT` overrides the commit where dind is found.\n* `DOCKER_VERSION` overrides the installed Docker version.\n* `DOCKER_COMPOSE_VERSION` overrides the installed docker-compose version.",
+            "stability": "experimental",
+            "summary": "Path to Dockerfile for Linux ARM64 with all the requirements for CodeBuild runner."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/codebuild.ts",
+            "line": 106
+          },
+          "name": "LINUX_ARM64_DOCKERFILE_PATH",
+          "static": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "const": true,
+          "docs": {
+            "remarks": "Use this Dockerfile unless you need to customize it further than allowed by hooks.\n\nAvailable build arguments that can be set in the image builder:\n* `BASE_IMAGE` sets the `FROM` line. This should be an Ubuntu compatible image.\n* `EXTRA_PACKAGES` can be used to install additional packages.\n* `DOCKER_CHANNEL` overrides the channel from which Docker will be downloaded. Defaults to `\"stsable\"`.\n* `DIND_COMMIT` overrides the commit where dind is found.\n* `DOCKER_VERSION` overrides the installed Docker version.\n* `DOCKER_COMPOSE_VERSION` overrides the installed docker-compose version.",
+            "stability": "experimental",
+            "summary": "Path to Dockerfile for Linux x64 with all the requirements for CodeBuild runner."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/codebuild.ts",
+            "line": 93
+          },
+          "name": "LINUX_X64_DOCKERFILE_PATH",
+          "static": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
         {
           "docs": {
             "stability": "experimental",
@@ -3113,7 +3717,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/codebuild.ts",
-            "line": 217
+            "line": 273
           },
           "name": "connections",
           "overrides": "aws-cdk-lib.aws_ec2.IConnectable",
@@ -3129,7 +3733,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/codebuild.ts",
-            "line": 96
+            "line": 131
           },
           "name": "grantPrincipal",
           "overrides": "aws-cdk-lib.aws_iam.IGrantable",
@@ -3145,7 +3749,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/codebuild.ts",
-            "line": 81
+            "line": 116
           },
           "name": "label",
           "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
@@ -3161,7 +3765,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/codebuild.ts",
-            "line": 76
+            "line": 111
           },
           "name": "project",
           "type": {
@@ -3176,7 +3780,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/codebuild.ts",
-            "line": 91
+            "line": 126
           },
           "name": "securityGroup",
           "optional": true,
@@ -3193,7 +3797,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/codebuild.ts",
-            "line": 86
+            "line": 121
           },
           "name": "vpc",
           "optional": true,
@@ -3218,7 +3822,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/providers/codebuild.ts",
-        "line": 18
+        "line": 20
       },
       "name": "CodeBuildRunnerProps",
       "properties": [
@@ -3233,7 +3837,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/codebuild.ts",
-            "line": 53
+            "line": 62
           },
           "name": "computeType",
           "optional": true,
@@ -3241,6 +3845,25 @@
             "fqn": "aws-cdk-lib.aws_codebuild.ComputeType"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "image builder with `CodeBuildRunner.LINUX_X64_DOCKERFILE_PATH` as Dockerfile",
+            "remarks": "A user named `runner` is expected to exist with access to Docker-in-Docker.",
+            "stability": "experimental",
+            "summary": "Provider running an image to run inside CodeBuild with GitHub runner pre-configured."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/codebuild.ts",
+            "line": 26
+          },
+          "name": "imageBuilder",
+          "optional": true,
+          "type": {
+            "fqn": "@cloudsnorkel/cdk-github-runners.IImageBuilder"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -3251,7 +3874,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/codebuild.ts",
-            "line": 24
+            "line": 33
           },
           "name": "label",
           "optional": true,
@@ -3269,7 +3892,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/codebuild.ts",
-            "line": 38
+            "line": 47
           },
           "name": "securityGroup",
           "optional": true,
@@ -3287,7 +3910,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/codebuild.ts",
-            "line": 45
+            "line": 54
           },
           "name": "subnetSelection",
           "optional": true,
@@ -3306,7 +3929,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/codebuild.ts",
-            "line": 62
+            "line": 71
           },
           "name": "timeout",
           "optional": true,
@@ -3324,7 +3947,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/codebuild.ts",
-            "line": 31
+            "line": 40
           },
           "name": "vpc",
           "optional": true,
@@ -3350,7 +3973,7 @@
         },
         "locationInModule": {
           "filename": "src/providers/fargate.ts",
-          "line": 193
+          "line": 229
         },
         "parameters": [
           {
@@ -3379,7 +4002,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/providers/fargate.ts",
-        "line": 142
+        "line": 160
       },
       "methods": [
         {
@@ -3390,7 +4013,7 @@
           },
           "locationInModule": {
             "filename": "src/providers/fargate.ts",
-            "line": 251
+            "line": 298
           },
           "name": "getStepFunctionTask",
           "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
@@ -3414,6 +4037,42 @@
       ],
       "name": "FargateRunner",
       "properties": [
+        {
+          "const": true,
+          "docs": {
+            "remarks": "Use this Dockerfile unless you need to customize it further than allowed by hooks.\n\nAvailable build arguments that can be set in the image builder:\n* `BASE_IMAGE` sets the `FROM` line. This should be an Ubuntu compatible image.\n* `EXTRA_PACKAGES` can be used to install additional packages.",
+            "stability": "experimental",
+            "summary": "Path to Dockerfile for Linux ARM64 with all the requirement for Fargate runner."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/fargate.ts",
+            "line": 177
+          },
+          "name": "LINUX_ARM64_DOCKERFILE_PATH",
+          "static": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "const": true,
+          "docs": {
+            "remarks": "Use this Dockerfile unless you need to customize it further than allowed by hooks.\n\nAvailable build arguments that can be set in the image builder:\n* `BASE_IMAGE` sets the `FROM` line. This should be an Ubuntu compatible image.\n* `EXTRA_PACKAGES` can be used to install additional packages.",
+            "stability": "experimental",
+            "summary": "Path to Dockerfile for Linux x64 with all the requirement for Fargate runner."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/fargate.ts",
+            "line": 168
+          },
+          "name": "LINUX_X64_DOCKERFILE_PATH",
+          "static": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
         {
           "docs": {
             "stability": "experimental",
@@ -3422,7 +4081,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/fargate.ts",
-            "line": 176
+            "line": 212
           },
           "name": "assignPublicIp",
           "type": {
@@ -3437,7 +4096,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/fargate.ts",
-            "line": 146
+            "line": 182
           },
           "name": "cluster",
           "type": {
@@ -3452,7 +4111,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/fargate.ts",
-            "line": 186
+            "line": 222
           },
           "name": "connections",
           "overrides": "aws-cdk-lib.aws_ec2.IConnectable",
@@ -3468,7 +4127,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/fargate.ts",
-            "line": 156
+            "line": 192
           },
           "name": "container",
           "type": {
@@ -3483,7 +4142,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/fargate.ts",
-            "line": 181
+            "line": 217
           },
           "name": "grantPrincipal",
           "overrides": "aws-cdk-lib.aws_iam.IGrantable",
@@ -3499,7 +4158,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/fargate.ts",
-            "line": 161
+            "line": 197
           },
           "name": "label",
           "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
@@ -3515,7 +4174,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/fargate.ts",
-            "line": 191
+            "line": 227
           },
           "name": "spot",
           "type": {
@@ -3530,7 +4189,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/fargate.ts",
-            "line": 151
+            "line": 187
           },
           "name": "task",
           "type": {
@@ -3545,7 +4204,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/fargate.ts",
-            "line": 171
+            "line": 207
           },
           "name": "securityGroup",
           "optional": true,
@@ -3562,7 +4221,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/fargate.ts",
-            "line": 166
+            "line": 202
           },
           "name": "vpc",
           "optional": true,
@@ -3588,7 +4247,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/providers/fargate.ts",
-        "line": 18
+        "line": 19
       },
       "name": "FargateRunnerProps",
       "properties": [
@@ -3603,7 +4262,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/fargate.ts",
-            "line": 54
+            "line": 72
           },
           "name": "assignPublicIp",
           "optional": true,
@@ -3621,7 +4280,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/fargate.ts",
-            "line": 45
+            "line": 63
           },
           "name": "cluster",
           "optional": true,
@@ -3640,7 +4299,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/fargate.ts",
-            "line": 73
+            "line": 91
           },
           "name": "cpu",
           "optional": true,
@@ -3659,7 +4318,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/fargate.ts",
-            "line": 100
+            "line": 118
           },
           "name": "ephemeralStorageGiB",
           "optional": true,
@@ -3667,6 +4326,25 @@
             "primitive": "number"
           }
         },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "image builder with `FargateRunner.LINUX_X64_DOCKERFILE_PATH` as Dockerfile",
+            "remarks": "A user named `runner` is expected to exist.\n\nThe entry point should start GitHub runner. For example:\n\n```\n#!/bin/bash\nset -e -u -o pipefail\n\n/home/runner/config.sh --unattended --url \"https://${GITHUB_DOMAIN}/${OWNER}/${REPO}\" --token \"${RUNNER_TOKEN}\" --ephemeral --work _work --labels \"${RUNNER_LABEL}\" --disableupdate --name \"${RUNNER_NAME}\"\n/home/runner/run.sh\n```",
+            "stability": "experimental",
+            "summary": "Provider running an image to run inside CodeBuild with GitHub runner pre-configured."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/fargate.ts",
+            "line": 35
+          },
+          "name": "imageBuilder",
+          "optional": true,
+          "type": {
+            "fqn": "@cloudsnorkel/cdk-github-runners.IImageBuilder"
+          }
+        },
         {
           "abstract": true,
           "docs": {
@@ -3677,7 +4355,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/fargate.ts",
-            "line": 24
+            "line": 42
           },
           "name": "label",
           "optional": true,
@@ -3696,7 +4374,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/fargate.ts",
-            "line": 91
+            "line": 109
           },
           "name": "memoryLimitMiB",
           "optional": true,
@@ -3714,7 +4392,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/fargate.ts",
-            "line": 38
+            "line": 56
           },
           "name": "securityGroup",
           "optional": true,
@@ -3733,7 +4411,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/fargate.ts",
-            "line": 110
+            "line": 128
           },
           "name": "spot",
           "optional": true,
@@ -3751,7 +4429,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/fargate.ts",
-            "line": 31
+            "line": 49
           },
           "name": "vpc",
           "optional": true,
@@ -3766,7 +4444,7 @@
       "assembly": "@cloudsnorkel/cdk-github-runners",
       "base": "constructs.Construct",
       "docs": {
-        "remarks": "It creates a webhook, secrets, and a step function to orchestrate all runs. Secrets are not automatically filled. See README.md for instructions on how to setup GitHub integration.\n\nBy default, this will create a runner provider of each available type with the defaults. This is good enough for the initial setup stage when you just want to get GitHub integration working.\n\n```typescript\nnew GitHubRunners(stack, 'runners', {});\n```\n\nUsually you'd want to configure the runner providers so the runners can run in a certain VPC or have certain permissions.\n\n```typescript\nconst vpc = ec2.Vpc.fromLookup(stack, 'vpc', { vpcId: 'vpc-1234567' });\nconst runnerSg = new ec2.SecurityGroup(stack, 'runner security group', { vpc: vpc });\nconst dbSg = ec2.SecurityGroup.fromSecurityGroupId(stack, 'database security group', 'sg-1234567');\nconst bucket = new s3.Bucket(stack, 'runner bucket');\n\n// create a custom CodeBuild provider\nconst myProvider = new CodeBuildRunner(\n   stack, 'codebuild runner',\n   {\n      label: 'my-codebuild',\n      vpc: vpc,\n      securityGroup: runnerSg,\n   },\n);\n// grant some permissions to the provider\nbucket.grantReadWrite(myProvider);\ndbSg.connections.allowFrom(runnerSg, ec2.Port.tcp(3306), 'allow runners to connect to MySQL database');\n\n// create the runner infrastructure\nnew GitHubRunners(\n   stack,\n   'runners',\n   {\n     providers: [myProvider],\n   }\n);\n```",
+        "remarks": "It creates a webhook, secrets, and a step function to orchestrate all runs. Secrets are not automatically filled. See README.md for instructions on how to setup GitHub integration.\n\nBy default, this will create a runner provider of each available type with the defaults. This is good enough for the initial setup stage when you just want to get GitHub integration working.\n\n```typescript\nnew GitHubRunners(this, 'runners');\n```\n\nUsually you'd want to configure the runner providers so the runners can run in a certain VPC or have certain permissions.\n\n```typescript\nconst vpc = ec2.Vpc.fromLookup(this, 'vpc', { vpcId: 'vpc-1234567' });\nconst runnerSg = new ec2.SecurityGroup(this, 'runner security group', { vpc: vpc });\nconst dbSg = ec2.SecurityGroup.fromSecurityGroupId(this, 'database security group', 'sg-1234567');\nconst bucket = new s3.Bucket(this, 'runner bucket');\n\n// create a custom CodeBuild provider\nconst myProvider = new CodeBuildRunner(\n   this, 'codebuild runner',\n   {\n      label: 'my-codebuild',\n      vpc: vpc,\n      securityGroup: runnerSg,\n   },\n);\n// grant some permissions to the provider\nbucket.grantReadWrite(myProvider);\ndbSg.connections.allowFrom(runnerSg, ec2.Port.tcp(3306), 'allow runners to connect to MySQL database');\n\n// create the runner infrastructure\nnew GitHubRunners(\n   this,\n   'runners',\n   {\n     providers: [myProvider],\n   }\n);\n```",
         "stability": "experimental",
         "summary": "Create all the required infrastructure to provide self-hosted GitHub runners."
       },
@@ -3777,7 +4455,7 @@
         },
         "locationInModule": {
           "filename": "src/runner.ts",
-          "line": 81
+          "line": 140
         },
         "parameters": [
           {
@@ -3794,112 +4472,227 @@
           },
           {
             "name": "props",
+            "optional": true,
             "type": {
               "fqn": "@cloudsnorkel/cdk-github-runners.GitHubRunnersProps"
             }
           }
-        ]
-      },
-      "kind": "class",
-      "locationInModule": {
-        "filename": "src/runner.ts",
-        "line": 65
-      },
-      "name": "GitHubRunners",
-      "properties": [
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/runner.ts",
+        "line": 120
+      },
+      "name": "GitHubRunners",
+      "properties": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Configured runner providers."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/runner.ts",
+            "line": 127
+          },
+          "name": "providers",
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.IRunnerProvider"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Secrets for GitHub communication including webhook secret and runner authentication."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/runner.ts",
+            "line": 132
+          },
+          "name": "secrets",
+          "type": {
+            "fqn": "@cloudsnorkel/cdk-github-runners.Secrets"
+          }
+        }
+      ],
+      "symbolId": "src/runner:GitHubRunners"
+    },
+    "@cloudsnorkel/cdk-github-runners.GitHubRunnersProps": {
+      "assembly": "@cloudsnorkel/cdk-github-runners",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Properties for GitHubRunners."
+      },
+      "fqn": "@cloudsnorkel/cdk-github-runners.GitHubRunnersProps",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/runner.ts",
+        "line": 22
+      },
+      "name": "GitHubRunnersProps",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "false",
+            "remarks": "Lambda Functions in a public subnet can NOT access the internet.",
+            "stability": "experimental",
+            "summary": "Allow management functions to run in public subnets."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/runner.ts",
+            "line": 45
+          },
+          "name": "allowPublicSubnet",
+          "optional": true,
+          "type": {
+            "primitive": "boolean"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "You may also want to use custom images for your runner providers that contain the same certificates. See {@link CodeBuildImageBuilder.addCertificates}.\n\n```typescript\nconst imageBuilder = new CodeBuildImageBuilder(this, 'Image Builder with Certs', {\n     dockerfilePath: CodeBuildRunner.LINUX_X64_DOCKERFILE_PATH,\n});\nimageBuilder.addExtraCertificates('path-to-my-extra-certs-folder');\n\nconst provider = new CodeBuildRunner(this, 'CodeBuild', {\n     imageBuilder: imageBuilder,\n});\n\nnew GitHubRunners(\n   this,\n   'runners',\n   {\n     providers: [provider],\n     extraCertificates: 'path-to-my-extra-certs-folder',\n   }\n);\n```",
+            "stability": "experimental",
+            "summary": "Path to a directory containing a file named certs.pem containing any additional certificates required to trust GitHub Enterprise Server. Use this when GitHub Enterprise Server certificates are self-signed."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/runner.ts",
+            "line": 77
+          },
+          "name": "extraCertificates",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "CodeBuild, Lambda and Fargate runners with all the defaults (no VPC or default account VPC)",
+            "remarks": "At least one provider is required. Provider will be selected when its label matches the labels requested by the workflow job.",
+            "stability": "experimental",
+            "summary": "List of runner providers to use."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/runner.ts",
+            "line": 28
+          },
+          "name": "providers",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.IRunnerProvider"
+              },
+              "kind": "array"
+            }
+          }
+        },
         {
+          "abstract": true,
           "docs": {
-            "stability": "experimental"
+            "remarks": "Use this with to provide access to GitHub Enterprise Server hosted inside a VPC.",
+            "stability": "experimental",
+            "summary": "Security group attached to all management functions."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/runner.ts",
-            "line": 81
+            "line": 50
           },
-          "name": "props",
+          "name": "securityGroup",
+          "optional": true,
           "type": {
-            "fqn": "@cloudsnorkel/cdk-github-runners.GitHubRunnersProps"
+            "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
           }
         },
         {
+          "abstract": true,
           "docs": {
+            "remarks": "Use this with GitHub Enterprise Server hosted that's inaccessible from outside the VPC.",
             "stability": "experimental",
-            "summary": "Configured runner providers."
+            "summary": "VPC used for all management functions."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/runner.ts",
-            "line": 70
+            "line": 33
           },
-          "name": "providers",
+          "name": "vpc",
+          "optional": true,
           "type": {
-            "collection": {
-              "elementtype": {
-                "fqn": "@cloudsnorkel/cdk-github-runners.IRunnerProvider"
-              },
-              "kind": "array"
-            }
+            "fqn": "aws-cdk-lib.aws_ec2.IVpc"
           }
         },
         {
+          "abstract": true,
           "docs": {
+            "remarks": "Use this with GitHub Enterprise Server hosted that's inaccessible from outside the VPC.",
             "stability": "experimental",
-            "summary": "Secrets for GitHub communication including webhook secret and runner authentication."
+            "summary": "VPC subnets used for all management functions."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/runner.ts",
-            "line": 75
+            "line": 38
           },
-          "name": "secrets",
+          "name": "vpcSubnets",
+          "optional": true,
           "type": {
-            "fqn": "@cloudsnorkel/cdk-github-runners.Secrets"
+            "fqn": "aws-cdk-lib.aws_ec2.SubnetSelection"
           }
         }
       ],
-      "symbolId": "src/runner:GitHubRunners"
+      "symbolId": "src/runner:GitHubRunnersProps"
     },
-    "@cloudsnorkel/cdk-github-runners.GitHubRunnersProps": {
+    "@cloudsnorkel/cdk-github-runners.IImageBuilder": {
       "assembly": "@cloudsnorkel/cdk-github-runners",
-      "datatype": true,
       "docs": {
+        "remarks": "Anything that ends up with an ECR repository containing a Docker image that runs GitHub self-hosted runners can be used. A simple implementation could even point to an existing image and nothing else.\n\nIt's important that the specified image tag be available at the time the repository is available. Providers usually assume the image is ready and will fail if it's not.\n\nThe image can be further updated over time manually or using a schedule as long as it is always written to the same tag.",
         "stability": "experimental",
-        "summary": "Properties for GitHubRunners."
+        "summary": "Interface for constructs that build an image that can be used in {@link IRunnerProvider}."
       },
-      "fqn": "@cloudsnorkel/cdk-github-runners.GitHubRunnersProps",
+      "fqn": "@cloudsnorkel/cdk-github-runners.IImageBuilder",
       "kind": "interface",
       "locationInModule": {
-        "filename": "src/runner.ts",
-        "line": 16
+        "filename": "src/providers/common.ts",
+        "line": 129
       },
-      "name": "GitHubRunnersProps",
-      "properties": [
+      "methods": [
         {
           "abstract": true,
           "docs": {
-            "default": "CodeBuild, Lambda and Fargate runners with all the defaults (no VPC or default account VPC)",
-            "remarks": "At least one provider is required. Provider will be selected when its label matches the labels requested by the workflow job.",
+            "remarks": "This method can be called multiple times if the image is bound to multiple providers. Make sure you cache the image when implementing or return an error if this builder doesn't support reusing images.",
+            "returns": "image",
             "stability": "experimental",
-            "summary": "List of runner providers to use."
+            "summary": "ECR repository containing the image."
           },
-          "immutable": true,
           "locationInModule": {
-            "filename": "src/runner.ts",
-            "line": 22
+            "filename": "src/providers/common.ts",
+            "line": 137
           },
-          "name": "providers",
-          "optional": true,
-          "type": {
-            "collection": {
-              "elementtype": {
-                "fqn": "@cloudsnorkel/cdk-github-runners.IRunnerProvider"
-              },
-              "kind": "array"
+          "name": "bind",
+          "returns": {
+            "type": {
+              "fqn": "@cloudsnorkel/cdk-github-runners.RunnerImage"
             }
           }
         }
       ],
-      "symbolId": "src/runner:GitHubRunnersProps"
+      "name": "IImageBuilder",
+      "symbolId": "src/providers/common:IImageBuilder"
     },
     "@cloudsnorkel/cdk-github-runners.IRunnerProvider": {
       "assembly": "@cloudsnorkel/cdk-github-runners",
@@ -3916,7 +4709,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/providers/common.ts",
-        "line": 89
+        "line": 193
       },
       "methods": [
         {
@@ -3928,7 +4721,7 @@
           },
           "locationInModule": {
             "filename": "src/providers/common.ts",
-            "line": 112
+            "line": 216
           },
           "name": "getStepFunctionTask",
           "parameters": [
@@ -3960,7 +4753,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/common.ts",
-            "line": 93
+            "line": 197
           },
           "name": "label",
           "type": {
@@ -3976,7 +4769,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/common.ts",
-            "line": 103
+            "line": 207
           },
           "name": "securityGroup",
           "optional": true,
@@ -3993,7 +4786,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/common.ts",
-            "line": 98
+            "line": 202
           },
           "name": "vpc",
           "optional": true,
@@ -4019,7 +4812,7 @@
         },
         "locationInModule": {
           "filename": "src/providers/lambda.ts",
-          "line": 103
+          "line": 135
         },
         "parameters": [
           {
@@ -4048,7 +4841,7 @@
       "kind": "class",
       "locationInModule": {
         "filename": "src/providers/lambda.ts",
-        "line": 77
+        "line": 91
       },
       "methods": [
         {
@@ -4059,7 +4852,7 @@
           },
           "locationInModule": {
             "filename": "src/providers/lambda.ts",
-            "line": 150
+            "line": 198
           },
           "name": "getStepFunctionTask",
           "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
@@ -4083,6 +4876,42 @@
       ],
       "name": "LambdaRunner",
       "properties": [
+        {
+          "const": true,
+          "docs": {
+            "remarks": "Use this Dockerfile unless you need to customize it further than allowed by hooks.\n\nAvailable build arguments that can be set in the image builder:\n* `BASE_IMAGE` sets the `FROM` line. This should be similar to public.ecr.aws/lambda/nodejs:14.\n* `EXTRA_PACKAGES` can be used to install additional packages.",
+            "stability": "experimental",
+            "summary": "Path to Dockerfile for Linux ARM64 with all the requirement for Lambda runner."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 108
+          },
+          "name": "LINUX_ARM64_DOCKERFILE_PATH",
+          "static": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "const": true,
+          "docs": {
+            "remarks": "Use this Dockerfile unless you need to customize it further than allowed by hooks.\n\nAvailable build arguments that can be set in the image builder:\n* `BASE_IMAGE` sets the `FROM` line. This should be similar to public.ecr.aws/lambda/nodejs:14.\n* `EXTRA_PACKAGES` can be used to install additional packages.",
+            "stability": "experimental",
+            "summary": "Path to Dockerfile for Linux x64 with all the requirement for Lambda runner."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 99
+          },
+          "name": "LINUX_X64_DOCKERFILE_PATH",
+          "static": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
         {
           "docs": {
             "stability": "experimental",
@@ -4091,7 +4920,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/lambda.ts",
-            "line": 139
+            "line": 187
           },
           "name": "connections",
           "overrides": "aws-cdk-lib.aws_ec2.IConnectable",
@@ -4107,7 +4936,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/lambda.ts",
-            "line": 81
+            "line": 113
           },
           "name": "function",
           "type": {
@@ -4122,7 +4951,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/lambda.ts",
-            "line": 101
+            "line": 133
           },
           "name": "grantPrincipal",
           "overrides": "aws-cdk-lib.aws_iam.IGrantable",
@@ -4138,7 +4967,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/lambda.ts",
-            "line": 86
+            "line": 118
           },
           "name": "label",
           "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
@@ -4154,182 +4983,394 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/lambda.ts",
-            "line": 96
+            "line": 128
+          },
+          "name": "securityGroup",
+          "optional": true,
+          "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "VPC used for hosting the function."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 123
+          },
+          "name": "vpc",
+          "optional": true,
+          "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.IVpc"
+          }
+        }
+      ],
+      "symbolId": "src/providers/lambda:LambdaRunner"
+    },
+    "@cloudsnorkel/cdk-github-runners.LambdaRunnerProps": {
+      "assembly": "@cloudsnorkel/cdk-github-runners",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental"
+      },
+      "fqn": "@cloudsnorkel/cdk-github-runners.LambdaRunnerProps",
+      "interfaces": [
+        "@cloudsnorkel/cdk-github-runners.RunnerProviderProps"
+      ],
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/providers/lambda.ts",
+        "line": 18
+      },
+      "name": "LambdaRunnerProps",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "10 GiB",
+            "stability": "experimental",
+            "summary": "The size of the function’s /tmp directory in MiB."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 51
+          },
+          "name": "ephemeralStorageSize",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.Size"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "image builder with LambdaRunner.LINUX_X64_DOCKERFILE_PATH as Dockerfile",
+            "remarks": "The default command (`CMD`) should be `[\"runner.handler\"]` which points to an included `runner.js` with a function named `handler`. The function should start the GitHub runner.",
+            "see": "https://github.com/CloudSnorkel/cdk-github-runners/tree/main/src/providers/docker-images/lambda",
+            "stability": "experimental",
+            "summary": "Provider running an image to run inside CodeBuild with GitHub runner pre-configured."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 27
+          },
+          "name": "imageBuilder",
+          "optional": true,
+          "type": {
+            "fqn": "@cloudsnorkel/cdk-github-runners.IImageBuilder"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "'lambda'",
+            "stability": "experimental",
+            "summary": "GitHub Actions label used for this provider."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 34
+          },
+          "name": "label",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "2048",
+            "remarks": "Lambda uses this value to proportionally allocate the amount of CPU\npower. For more information, see Resource Model in the AWS Lambda\nDeveloper Guide.",
+            "stability": "experimental",
+            "summary": "The amount of memory, in MB, that is allocated to your Lambda function."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 44
+          },
+          "name": "memorySize",
+          "optional": true,
+          "type": {
+            "primitive": "number"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "public lambda with no security group",
+            "stability": "experimental",
+            "summary": "Security Group to assign to this instance."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 74
           },
           "name": "securityGroup",
           "optional": true,
-          "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
           "type": {
-            "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
+            "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "no subnet",
+            "stability": "experimental",
+            "summary": "Where to place the network interfaces within the VPC."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 81
+          },
+          "name": "subnetSelection",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.SubnetSelection"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "Duration.minutes(15)",
+            "remarks": "Because the execution time affects cost, set this value\nbased on the function's expected execution time.",
+            "stability": "experimental",
+            "summary": "The function execution time (in seconds) after which Lambda terminates the function."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/lambda.ts",
+            "line": 60
+          },
+          "name": "timeout",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.Duration"
           }
         },
         {
+          "abstract": true,
           "docs": {
+            "default": "no VPC",
             "stability": "experimental",
-            "summary": "VPC used for hosting the function."
+            "summary": "VPC to launch the runners in."
           },
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/lambda.ts",
-            "line": 91
+            "line": 67
           },
           "name": "vpc",
           "optional": true,
-          "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
           "type": {
             "fqn": "aws-cdk-lib.aws_ec2.IVpc"
           }
         }
       ],
-      "symbolId": "src/providers/lambda:LambdaRunner"
+      "symbolId": "src/providers/lambda:LambdaRunnerProps"
     },
-    "@cloudsnorkel/cdk-github-runners.LambdaRunnerProps": {
+    "@cloudsnorkel/cdk-github-runners.Os": {
       "assembly": "@cloudsnorkel/cdk-github-runners",
-      "datatype": true,
       "docs": {
-        "stability": "experimental"
+        "stability": "experimental",
+        "summary": "OS enum for an image."
       },
-      "fqn": "@cloudsnorkel/cdk-github-runners.LambdaRunnerProps",
-      "interfaces": [
-        "@cloudsnorkel/cdk-github-runners.RunnerProviderProps"
-      ],
-      "kind": "interface",
+      "fqn": "@cloudsnorkel/cdk-github-runners.Os",
+      "kind": "class",
       "locationInModule": {
-        "filename": "src/providers/lambda.ts",
-        "line": 14
+        "filename": "src/providers/common.ts",
+        "line": 63
       },
-      "name": "LambdaRunnerProps",
+      "methods": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Checks if the given OS is the same as this one."
+          },
+          "locationInModule": {
+            "filename": "src/providers/common.ts",
+            "line": 86
+          },
+          "name": "is",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "OS to compare."
+              },
+              "name": "os",
+              "type": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.Os"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "primitive": "boolean"
+            }
+          }
+        }
+      ],
+      "name": "Os",
       "properties": [
         {
-          "abstract": true,
+          "const": true,
           "docs": {
-            "default": "10 GiB",
             "stability": "experimental",
-            "summary": "The size of the function’s /tmp directory in MiB."
+            "summary": "Linux."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/lambda.ts",
-            "line": 37
+            "filename": "src/providers/common.ts",
+            "line": 67
           },
-          "name": "ephemeralStorageSize",
-          "optional": true,
+          "name": "LINUX",
+          "static": true,
           "type": {
-            "fqn": "aws-cdk-lib.Size"
+            "fqn": "@cloudsnorkel/cdk-github-runners.Os"
           }
         },
         {
-          "abstract": true,
+          "const": true,
           "docs": {
-            "default": "'lambda'",
             "stability": "experimental",
-            "summary": "GitHub Actions label used for this provider."
+            "summary": "Windows."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/lambda.ts",
-            "line": 20
+            "filename": "src/providers/common.ts",
+            "line": 72
           },
-          "name": "label",
-          "optional": true,
+          "name": "WINDOWS",
+          "static": true,
           "type": {
-            "primitive": "string"
+            "fqn": "@cloudsnorkel/cdk-github-runners.Os"
           }
         },
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/common.ts",
+            "line": 78
+          },
+          "name": "name",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "src/providers/common:Os"
+    },
+    "@cloudsnorkel/cdk-github-runners.RunnerImage": {
+      "assembly": "@cloudsnorkel/cdk-github-runners",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental"
+      },
+      "fqn": "@cloudsnorkel/cdk-github-runners.RunnerImage",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/providers/common.ts",
+        "line": 91
+      },
+      "name": "RunnerImage",
+      "properties": [
         {
           "abstract": true,
           "docs": {
-            "default": "2048",
-            "remarks": "Lambda uses this value to proportionally allocate the amount of CPU\npower. For more information, see Resource Model in the AWS Lambda\nDeveloper Guide.",
             "stability": "experimental",
-            "summary": "The amount of memory, in MB, that is allocated to your Lambda function."
+            "summary": "Architecture of the image."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/lambda.ts",
-            "line": 30
+            "filename": "src/providers/common.ts",
+            "line": 112
           },
-          "name": "memorySize",
-          "optional": true,
+          "name": "architecture",
           "type": {
-            "primitive": "number"
+            "fqn": "@cloudsnorkel/cdk-github-runners.Architecture"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "public lambda with no security group",
+            "remarks": "WARNING: the digest might change when the builder automatically rebuilds the image on a schedule. Do not expect for this digest to stay the same between deploys.",
             "stability": "experimental",
-            "summary": "Security Group to assign to this instance."
+            "summary": "Image digest for providers that need to know the digest like Lambda."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/lambda.ts",
-            "line": 60
+            "filename": "src/providers/common.ts",
+            "line": 107
           },
-          "name": "securityGroup",
-          "optional": true,
+          "name": "imageDigest",
           "type": {
-            "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
+            "primitive": "string"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "no subnet",
             "stability": "experimental",
-            "summary": "Where to place the network interfaces within the VPC."
+            "summary": "ECR repository containing the image."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/lambda.ts",
-            "line": 67
+            "filename": "src/providers/common.ts",
+            "line": 95
           },
-          "name": "subnetSelection",
-          "optional": true,
+          "name": "imageRepository",
           "type": {
-            "fqn": "aws-cdk-lib.aws_ec2.SubnetSelection"
+            "fqn": "aws-cdk-lib.aws_ecr.IRepository"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "Duration.minutes(15)",
-            "remarks": "Because the execution time affects cost, set this value\nbased on the function's expected execution time.",
             "stability": "experimental",
-            "summary": "The function execution time (in seconds) after which Lambda terminates the function."
+            "summary": "Static image tag where the image will be pushed."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/lambda.ts",
-            "line": 46
+            "filename": "src/providers/common.ts",
+            "line": 100
           },
-          "name": "timeout",
-          "optional": true,
+          "name": "imageTag",
           "type": {
-            "fqn": "aws-cdk-lib.Duration"
+            "primitive": "string"
           }
         },
         {
           "abstract": true,
           "docs": {
-            "default": "no VPC",
             "stability": "experimental",
-            "summary": "VPC to launch the runners in."
+            "summary": "OS type of the image."
           },
           "immutable": true,
           "locationInModule": {
-            "filename": "src/providers/lambda.ts",
-            "line": 53
+            "filename": "src/providers/common.ts",
+            "line": 117
           },
-          "name": "vpc",
-          "optional": true,
+          "name": "os",
           "type": {
-            "fqn": "aws-cdk-lib.aws_ec2.IVpc"
+            "fqn": "@cloudsnorkel/cdk-github-runners.Os"
           }
         }
       ],
-      "symbolId": "src/providers/lambda:LambdaRunnerProps"
+      "symbolId": "src/providers/common:RunnerImage"
     },
     "@cloudsnorkel/cdk-github-runners.RunnerProviderProps": {
       "assembly": "@cloudsnorkel/cdk-github-runners",
@@ -4342,7 +5383,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/providers/common.ts",
-        "line": 32
+        "line": 143
       },
       "name": "RunnerProviderProps",
       "properties": [
@@ -4357,31 +5398,13 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/common.ts",
-            "line": 47
+            "line": 151
           },
           "name": "logRetention",
           "optional": true,
           "type": {
             "fqn": "aws-cdk-lib.aws_logs.RetentionDays"
           }
-        },
-        {
-          "abstract": true,
-          "docs": {
-            "default": "latest version available",
-            "stability": "experimental",
-            "summary": "Version of GitHub Runners to install."
-          },
-          "immutable": true,
-          "locationInModule": {
-            "filename": "src/providers/common.ts",
-            "line": 38
-          },
-          "name": "runnerVersion",
-          "optional": true,
-          "type": {
-            "fqn": "@cloudsnorkel/cdk-github-runners.RunnerVersion"
-          }
         }
       ],
       "symbolId": "src/providers/common:RunnerProviderProps"
@@ -4398,7 +5421,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "src/providers/common.ts",
-        "line": 59
+        "line": 163
       },
       "name": "RunnerRuntimeParameters",
       "properties": [
@@ -4412,7 +5435,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/common.ts",
-            "line": 73
+            "line": 177
           },
           "name": "githubDomainPath",
           "type": {
@@ -4428,7 +5451,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/common.ts",
-            "line": 78
+            "line": 182
           },
           "name": "ownerPath",
           "type": {
@@ -4444,7 +5467,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/common.ts",
-            "line": 83
+            "line": 187
           },
           "name": "repoPath",
           "type": {
@@ -4461,7 +5484,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/common.ts",
-            "line": 68
+            "line": 172
           },
           "name": "runnerNamePath",
           "type": {
@@ -4477,7 +5500,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/common.ts",
-            "line": 63
+            "line": 167
           },
           "name": "runnerTokenPath",
           "type": {
@@ -4687,8 +5710,150 @@
         }
       ],
       "symbolId": "src/secrets:Secrets"
+    },
+    "@cloudsnorkel/cdk-github-runners.StaticRunnerImage": {
+      "assembly": "@cloudsnorkel/cdk-github-runners",
+      "docs": {
+        "stability": "experimental",
+        "summary": "Helper class with methods to use static images that are built outside the context of this project."
+      },
+      "fqn": "@cloudsnorkel/cdk-github-runners.StaticRunnerImage",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        }
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/providers/image-builders/static.ts",
+        "line": 10
+      },
+      "methods": [
+        {
+          "docs": {
+            "remarks": "The image must already have GitHub Actions runner installed. You are responsible to update it and remove it when done.\n\nWe create a CodeBuild image builder behind the scenes to copy the image over to ECR. This helps avoid Docker Hub rate limits and prevent failures.",
+            "stability": "experimental",
+            "summary": "Create a builder from an existing Docker Hub image."
+          },
+          "locationInModule": {
+            "filename": "src/providers/image-builders/static.ts",
+            "line": 44
+          },
+          "name": "fromDockerHub",
+          "parameters": [
+            {
+              "name": "scope",
+              "type": {
+                "fqn": "constructs.Construct"
+              }
+            },
+            {
+              "name": "id",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "Docker Hub image with optional tag."
+              },
+              "name": "image",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "image architecture."
+              },
+              "name": "architecture",
+              "optional": true,
+              "type": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.Architecture"
+              }
+            },
+            {
+              "docs": {
+                "summary": "image OS."
+              },
+              "name": "os",
+              "optional": true,
+              "type": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.Os"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@cloudsnorkel/cdk-github-runners.IImageBuilder"
+            }
+          },
+          "static": true
+        },
+        {
+          "docs": {
+            "remarks": "The image must already have GitHub Actions runner installed. You are responsible to update it and remove it when done.",
+            "stability": "experimental",
+            "summary": "Create a builder (that doesn't actually build anything) from an existing image in an existing repository."
+          },
+          "locationInModule": {
+            "filename": "src/providers/image-builders/static.ts",
+            "line": 19
+          },
+          "name": "fromEcrRepository",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "ECR repository."
+              },
+              "name": "repository",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_ecr.IRepository"
+              }
+            },
+            {
+              "docs": {
+                "summary": "image tag."
+              },
+              "name": "tag",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "image architecture."
+              },
+              "name": "architecture",
+              "optional": true,
+              "type": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.Architecture"
+              }
+            },
+            {
+              "docs": {
+                "summary": "image OS."
+              },
+              "name": "os",
+              "optional": true,
+              "type": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.Os"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@cloudsnorkel/cdk-github-runners.IImageBuilder"
+            }
+          },
+          "static": true
+        }
+      ],
+      "name": "StaticRunnerImage",
+      "symbolId": "src/providers/image-builders/static:StaticRunnerImage"
     }
   },
-  "version": "0.2.0",
-  "fingerprint": "v+NQ0HXb/MqIb1CabazvNOGWELcQpAjFqi+9xq6QPnU="
-}
+  "version": "0.3.2",
+  "fingerprint": "5LpDdECrJv22Gc6zQvmsw2Sh7T6mwuk2VTMzBpwEcHI="
+}