Show HN: Forge – Secure, Multi-Tenant GitHub Actions Runners on K8s or EC2

Summary

🚀 Forge CI Platform Forge is a scalable, secure, and fully automated multi-tenant platform for running ephemeral GitHub Actions runners on AWS — designed for platform teams, by platform engineers. 🛠️ Community-Driven: Forge is an open-source project maintained on a best-effort basis. Contributions are welcome — help triage issues, submit PRs, review code, or join discussions! 📚 Docs: Comprehensive documentation is available at cisco-open.github.io/forge. 🔍 What Is Forge? Forge automates the provisioning and lifecycle management of ephemeral GitHub Actions runners across EC2 and EKS, leveraging the terraform-aws-github-runner module and actions-runner-controller Helm chart — adding multi-tenant isolation, drift remediation, and native observability out-of-the-box. 🔑 Core Features Ephemeral Runners: Auto-scaling EC2 and EKS runners — zero idle waste. Auto-scaling EC2 and EKS runners — zero idle waste. Tenant Isolation: Secure per-tenant boundaries using IAM and OIDC. Secure per-tenant boundaries using IAM and OIDC. Zero-Touch Automation: Fully automated lifecycle — patching, updates, drift detection, onboarding. Fully automated lifecycle — patching, updates, drift detection, onboarding. Observability Built-In: Dashboards, logs, and metrics out-of-the-box. Dashboards, logs, and metrics out-of-the-box. Cost-Aware Scheduling: Spot instances + scale-to-zero = minimal cost. Spot instances + scale-to-zero = minimal cost. Flexible Infrastructure: BYO AMI, instance types, subnets, and more. BYO AMI, instance types, subnets, and more. Multi-Runner Deployments: Launch multiple runner types in one deployment. Launch multiple runner types in one deployment. Broad OS Support: Linux (x64/arm64) and Windows. Linux (x64/arm64) and Windows. GitHub Cloud & GHES Support: Seamless support for both hosting models. ⚡ Getting Started Start fast with our Getting Started guide. 🏗️ Infrastructure Setup Prepare your AWS account. Deploy the Forge infrastructure and platform modules using Tofu — ...