Skip to content

Navigation Menu

Appearance settings

- AI CODE CREATION
  GitHub CopilotWrite better code with AI
  GitHub Copilot appDirect agents from issue to merge
  MCP Registry^NewIntegrate external tools
- DEVELOPER WORKFLOWS
  ActionsAutomate any workflow
  CodespacesInstant dev environments
  IssuesPlan and track work
  Code ReviewManage code changes
- APPLICATION SECURITY
  GitHub Advanced SecurityFind and fix vulnerabilities
  Code securitySecure your code as you build
  Secret protectionStop leaks before they start
- EXPLORE
  Why GitHub
  Documentation
  Blog
  Changelog
  Marketplace
View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Search code, repositories, users, issues, pull requests...

Search

Clear

Search syntax tips

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Name

Query

To see all available qualifiers, see our documentation.

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

Uh oh!

There was an error while loading. Please reload this page.

actions / runner Public

Notifications You must be signed in to change notification settings
Fork 1.4k
Star 6.1k

Code
Issues 407
Pull requests 115
Discussions
Actions
Security and quality 1
Insights

Additional navigation options

Code
Issues
Pull requests
Discussions
Actions
Security and quality
Insights

Add optional native OpenTelemetry export for runner, jobs, and steps#4366

Draft

stefanpenner wants to merge 60 commits into

actions:mainactions/runner:mainfrom

stefanpenner:otel-step-tracesstefanpenner/gh-actions-runner:otel-step-tracesCopy head branch name to clipboard

Conversation Commits60 (60)Checks Files changed

Draft

Add optional native OpenTelemetry export for runner, jobs, and steps#4366
stefanpenner wants to merge 60 commits into
actions:mainfrom
stefanpenner:otel-step-traces

Commits

Commits on Jul 2, 2026

Add optional OTel trace export for step-level execution timing

stefanpenner
and
claude
committed
Emit native OTel for runner info, jobs, and steps

stefanpenner
and
claude
committed
Gate OTel export behind a server-side feature flag

stefanpenner
and
claude
committed
Document native OTel export (ADR 4366)

stefanpenner
and
claude
committed
Add OTLP auth headers and secret-masking to OTel export

stefanpenner
and
claude
committed
Address review conventions: env-var constants, resilience test

stefanpenner
and
claude
committed
Make OTel exporter a RunnerService; proxy-aware HTTP + Trace logging

stefanpenner
and
claude
committed
Address adversarial review: embedded steps, JSON robustness, flush hardening

stefanpenner
and
claude
committed
Resolve remaining review findings: harness parity, step IDs, re-runs

stefanpenner
and
claude
committed
Enrich OTel export: VCS/throttling, child spans, context propagation, logs

stefanpenner
and
claude
committed
Align with OTel semconv: result enum, vcs.ref.head.*, cicd.worker.*, schema_url

stefanpenner
and
claude
committed
Add exception events, PR/vcs.change context, cicd.pipeline.task.type

stefanpenner
and
claude
committed
Emit OTel metrics: cicd.pipeline.run.duration + run.errors

stefanpenner
and
claude
committed
Honor OTEL_RESOURCE_ATTRIBUTES + emit cicd.system.component

stefanpenner
and
claude
committed
Deterministic IDs: SHA-256 (truncated) instead of MD5

stefanpenner
and
claude
committed
Link job span to an inbound scheduler trace context (W3C)

stefanpenner
and
claude
committed
Drop custom source attribute + github.runner.name/id dupes

stefanpenner
and
claude
committed
Add otel-runner image build (PR#4366 -> ARC-compatible linux image)

stefanpenner
and
claude
committed
otel-runner: bump reported version to 2.335.1 (fix exit-7 deprecation)

stefanpenner
and
claude
committed
OTel: make job span the trace root + give action-resolution spans a result

stefanpenner
and
claude
committed
OTel: nest action-resolution spans under their owning step (e.g. Set up job)

stefanpenner
and
claude
committed
OTel: emit cicd.pipeline.task.duration metric per job and step

stefanpenner
and
claude
committed
OTel: production hardening batch 1 — flush safety, no header leak, run.attempt

stefanpenner
and
claude
committed
OTel: add perf/memory micro-benchmark + results doc

stefanpenner
and
claude
committed
OTel: bound buffer memory (P0) so a runaway job can't OOM the worker

stefanpenner
and
claude
committed
OTel: gzip export + bounded retry + overall flush deadline (P1 resilience)

stefanpenner
and
claude
committed
OTel: action stage on step spans + job-level annotations as logs

stefanpenner
and
claude
committed
OTel benchmarks: macro results (no measurable job overhead) + sampling decision

stefanpenner
and
claude
committed
OTel: emit a process sub-span for run: steps (command vs runner overhead)

stefanpenner
and
claude
committed
OTel: per-container pull/create sub-spans under Initialize containers

stefanpenner
and
claude
committed
OTel ADR: rewrite to match shipping code + justify hand-rolled vs SDK; own ID contract in-repo

stefanpenner
and
claude
committed
OTel: rename metrics to github.pipeline.* + proper histogram buckets

stefanpenner
and
claude
committed
OTel: semconv hygiene — CLIENT kind, github.record_type, partial-success, log schemaUrl

stefanpenner
and
claude
committed
OTel: extract OTLP/HTTP transport into a testable component + add wire tests

stefanpenner
and
claude
committed
OTel: move OTLP serialization into a partial-class file (reviewability, no behavior change)

stefanpenner
and
claude
committed
OTel: retry only the OTLP-retryable codes (429/502/503/504), never 408/500

stefanpenner
and
claude
committed
OTel: honor Retry-After on throttle; jitter the retry delay

stefanpenner
and
claude
committed
OTel: identify the exporter with a User-Agent header

stefanpenner
and
claude
committed
OTel: chunk span/log flush into bounded POSTs; serialize straight to UTF-8 bytes

stefanpenner
and
claude
committed
OTel: map os.type/host.arch to semconv enum values (darwin/amd64/...)

stefanpenner
and
claude
committed
OTel: emit semconv process.exit.code as a typed int attribute

stefanpenner
and
claude
committed
OTel: declare schema_url 1.34.0 — the version the attribute set actually conforms to

stefanpenner
and
claude
committed
OTel: never evict the job root span at the buffer cap

stefanpenner
and
claude
committed
OTel: scrub ACTIONS_RUNNER_OTLP_HEADERS from the worker env after reading it

stefanpenner
and
claude
committed
OTel: strip URL userinfo before propagating/logging the endpoint

stefanpenner
and
claude
committed
OTel: add ACTIONS_RUNNER_OTLP_CERTIFICATE (CA bundle); warn loudly on INSECURE

stefanpenner
and
claude
committed
OTel: guard Initialize/SetResource/SetJobInfo/StepPropagationEnv (never throw into the job)

stefanpenner
and
claude
committed
OTel: one end-of-job Warning summary when exports failed or data was dropped

stefanpenner
and
claude
committed
OTel: document the deliberate no-length-floor policy for masked header values

stefanpenner
and
claude
committed
OTel: serialize attribute AnyValues with correct wire types (double/array/bytes)

stefanpenner
and
claude
committed
OTel: real exception semantics on failure — status.message + message-only exception event

stefanpenner
and
claude
committed
OTel: job span kind INTERNAL — it is a cicd task run, not the pipeline run

stefanpenner
and
claude
committed
OTel: adopt semconv cicd.pipeline.run.errors; rename job duration metric honestly

stefanpenner
and
claude
committed
OTel: step propagation never clobbers workflow env; cover JS/Docker action steps

stefanpenner
and
claude
committed
Test harness: restore fail-loud GetService; allowlist only IOTelTraceExporter

stefanpenner
and
claude
committed
OTel: document why flush precedes the job-completion report

stefanpenner
and
claude
committed
OTel: measure the collector-down flush bound; honest n=3 caveat in benchmarks

stefanpenner
and
claude
committed
OTel ADR: call out the ?? true flag-default convention deviation explicitly

stefanpenner
and
claude
committed
OTel docs: sync ADR + release note with the hardening batches

stefanpenner
and
claude
committed
docs: document cicd.worker.* attribute scope difference (runner vs ARC listener)

stefanpenner
and
claude
committed

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.