I ended up with wrapping runner into my own container: https://github.com/mystdeim/github-runner. It's pretty easy, I hope my container will help you. All you need is PAT token.