Takumi Runner

info

The English user guide is currently in beta preview. Most of the documents have been automatically translated from the Japanese version. Should you find any inaccuracies, please reach out to Flatt Security.

Takumi Runner is a runner service that traces GitHub Actions workflow execution with eBPF.

Key capabilities:

• Trace Collection: Records process, network, and file operations during workflow execution with eBPF.
• Trace Visualization & Analysis: View collected traces in timelines and process trees to investigate suspicious behavior.
• Auto Triaging: Automatically detects and classifies events that require attention based on trace data.

Takumi Runner operates as a GitHub Actions self-hosted runner. You can get started by simply changing the runs-on label in your existing workflow.

See Quickstart for setup instructions and Limitations & Caveats for known constraints.