--- title: Repository custom runner settings for Dependabot | daily.dev description: Repository administrators can now configure runner type, custom labels, and runner groups for Dependabot version and security updates directly at the... canonical: https://daily.dev/posts/repository-custom-runner-settings-for-dependabot-d3me117br twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Repository custom runner settings for Dependabot | daily.dev og:description: Repository administrators can now configure runner type, custom labels, and runner groups for Dependabot version and security updates directly at the... og:url: https://daily.dev/posts/repository-custom-runner-settings-for-dependabot-d3me117br og:image: https://api.daily.dev/og/posts/d3me117BR.png og:image:alt: Repository custom runner settings for Dependabot og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Repository custom runner settings for Dependabot **[GitHub Changelog](https://daily.dev/sources/github_updates)** · 1 min read · 0 upvotes · 0 comments ## Summary Repository administrators can now configure runner type, custom labels, and runner groups for Dependabot version and security updates directly at the repository level, extending controls previously available only at the organization level. This lets teams route Dependabot jobs to self-hosted or larger GitHub-hosted runners for access to private registries or specialized environments. The feature applies to private and internal repositories on github.com; it is not available for public repos or GitHub Enterprise Server, and security configurations do not yet enforce these runner settings. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Can I configure a custom runner for Dependabot at the repository level instead of just organization-wide? Yes, repository administrators can now set the runner type, an optional custom label, and an optional runner group for Dependabot version and security updates directly in repository settings. This extends runner configuration that was previously only available at the organization level, letting individual repositories target self-hosted or larger GitHub-hosted runners. _daily.dev surfaces GitHub Actions and Dependabot changes like this for teams tuning CI infrastructure._ ### Where do I set a custom label for Dependabot runners in a GitHub repository? Go to repository Settings, select Advanced Security, find Dependabot version updates under Dependency scanning, and edit Runner type. Choose Labeled runner to optionally enter a custom label and runner group, or Standard GitHub runner for the default GitHub-hosted environment; if no label is set, Dependabot uses the default 'dependabot' label. _Developers configuring dependency automation track setup changes like this via daily.dev._ ### Does this Dependabot runner setting work on public repositories or GitHub Enterprise Server? No, repository-level custom runner settings for Dependabot are only available for private and internal repositories on github.com; the controls are hidden for public repositories and unavailable on GitHub Enterprise Server. Additionally, security configurations do not currently enforce these Dependabot runner settings. _Teams planning supply-chain tooling rollouts follow platform limitations like these on daily.dev._ ## Similar posts on daily.dev - [Custom labels configuration option for Dependabot self-hosted and larger GitHub-hosted Actions runners now generally available at the organization level](https://daily.dev/posts/custom-labels-configuration-option-for-dependabot-self-hosted-and-larger-github-hosted-actions-runne-rwjmkpmq3) · GitHub Changelog · 0 upvotes · 0 comments - [Organization runner controls for Copilot cloud agent](https://daily.dev/posts/organization-runner-controls-for-copilot-cloud-agent-hffiw5jdy) · GitHub Changelog · 0 upvotes · 0 comments - [GitHub Actions Custom Runner Images Reach General Availability](https://daily.dev/posts/github-actions-custom-runner-images-reach-general-availability-bkfifh4ww) · InfoQ · 0 upvotes · 0 comments - [Cross-org Dependabot access for internal repositories](https://daily.dev/posts/cross-org-dependabot-access-for-internal-repositories-q0xmwvv13) · GitHub Changelog · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#github](https://daily.dev/tags/github), [#github-actions](https://daily.dev/tags/github-actions), [#dependabot](https://daily.dev/tags/dependabot) [View this post on daily.dev](https://daily.dev/posts/repository-custom-runner-settings-for-dependabot-d3me117br) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Repository custom runner settings for Dependabot","url":"https://daily.dev/posts/repository-custom-runner-settings-for-dependabot-d3me117br","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/repository-custom-runner-settings-for-dependabot-d3me117br"},"datePublished":"2026-09-29T19:32:26.908Z","dateModified":"2026-09-29T19:32:44.074Z","description":"Repository administrators can now configure runner type, custom labels, and runner groups for Dependabot version and security updates directly at the...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/130b3bca59caa9a1837c28072eef0242?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/130b3bca59caa9a1837c28072eef0242?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"GitHub Changelog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"GitHub Changelog","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/15004b7835da4d89b02b115871f0f6dc","url":"https://daily.dev/sources/github_updates"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/repository-custom-runner-settings-for-dependabot-d3me117br","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,github,github-actions,dependabot","timeRequired":"PT1M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"GitHub Changelog","item":"https://daily.dev/sources/github_updates"},{"@type":"ListItem","position":3,"name":"Repository custom runner settings for Dependabot"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/repository-custom-runner-settings-for-dependabot-d3me117br#faq","mainEntity":[{"@type":"Question","name":"Can I configure a custom runner for Dependabot at the repository level instead of just organization-wide?","acceptedAnswer":{"@type":"Answer","text":"Yes, repository administrators can now set the runner type, an optional custom label, and an optional runner group for Dependabot version and security updates directly in repository settings. This extends runner configuration that was previously only available at the organization level, letting individual repositories target self-hosted or larger GitHub-hosted runners. daily.dev surfaces GitHub Actions and Dependabot changes like this for teams tuning CI infrastructure."}},{"@type":"Question","name":"Where do I set a custom label for Dependabot runners in a GitHub repository?","acceptedAnswer":{"@type":"Answer","text":"Go to repository Settings, select Advanced Security, find Dependabot version updates under Dependency scanning, and edit Runner type. Choose Labeled runner to optionally enter a custom label and runner group, or Standard GitHub runner for the default GitHub-hosted environment; if no label is set, Dependabot uses the default 'dependabot' label. Developers configuring dependency automation track setup changes like this via daily.dev."}},{"@type":"Question","name":"Does this Dependabot runner setting work on public repositories or GitHub Enterprise Server?","acceptedAnswer":{"@type":"Answer","text":"No, repository-level custom runner settings for Dependabot are only available for private and internal repositories on github.com; the controls are hidden for public repositories and unavailable on GitHub Enterprise Server. Additionally, security configurations do not currently enforce these Dependabot runner settings. Teams planning supply-chain tooling rollouts follow platform limitations like these on daily.dev."}}]} ```