GitHub Enterprise Server 3.3 RC: Ephemeral runners, security manager role, and a high-contrast theme

The release candidate for GitHub Enterprise Server 3.3 is now available, bringing improvements to CI/CD workflows, repository security, and theme options. As with any release candidate, GitHub recommends testing on non-production environments before upgrading.

A new security role for org-wide oversight

Security teams often need uniform visibility and control across an entire organization. The new security manager role gives designated team members a consistent set of permissions across all repositories and organizations:

  • Read access on every repository in the organization
  • Write access to all security alerts at the organization level
  • Access to the organization-level security tab
  • Write access to security settings at both the organization and repository level

security-manager-role-3 3

Additionally, administrators can now set expiration dates on personal access tokens, whether newly created or already in use. Users will receive email notifications when their tokens are due for renewal and can regenerate tokens with the same properties as the original. API responses now include a GitHub-Authentication-Token-Expiration header that indicates when a token expires.

Clean environments for every job

For teams that require each CI job to start on a fresh machine, GitHub Enterprise Server 3.3 adds support for ephemeral runners, which handle a single job before being de-registered. The new workflow_job webhook complements this by making it easier to automate the process of cycling, registering, and scaling runners on demand.

The release also extends CodeQL, part of GitHub Advanced Security, with broader coverage for libraries and frameworks. The static analysis engine can now identify additional sources of untrusted user input, trace how that data flows through code, and flag potentially dangerous sinks where it may cause harm.

High-contrast dark mode

Following the addition of dark and dimmed themes in the previous release, Enterprise Server 3.3 introduces a high contrast dark theme for users who need stronger differentiation between UI elements.

High Contrast Dark Theme

For details on the full set of changes, see the release notes or download the release candidate.