{"version":"2.1.307","anchor":"runner-ca-bundle-errors-now-mention-deny-list-check","canonical_anchor":"runner-ca-bundle-errors-now-mention-deny-list-check","heading":"Runner certificate errors now mention a deny-list check","tier":"notice","area":"Self-Hosted Runner","scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.307\/e\/runner-ca-bundle-errors-now-mention-deny-list-check","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.307","markdown":"### Runner certificate errors now mention a deny-list check\n\nWhen the runner cannot write its certificate bundle or find system certificates, the error now mentions a deny-list check and suggests --log-level debug\n\n**What**\n\nThe runner builds a certificate bundle, a file listing the certificate authorities it trusts for secure connections. When writing that bundle fails, or no system certificates are found, the explanation now mentions a check against Claude Code's deny list. It also suggests running with `--log-level debug`, which prints the error for a failed deny-list check or a step that did not complete. Before, it only said to check the folder's permissions and free space.\n\n**Why**\n\nCertificates in the runner's bundle are now checked against a deny list, and `--log-level debug` shows when that check is what failed.\n\n- Area: Self-Hosted Runner\n- Tier: You'll notice\n- Useful: 1\/5\n- Signal: 1\/5\n- Scope: org\n- Heads-up: no"}