Shared runner settings
One of the key components of CI/CD is the runners. In this section, you can enable shared runners for all new projects, which means that any shared runner could end up building your code. There is a security aspect to this because shared runners could exist that aren't using a stateless mechanism. They could be running your job, and not clean up the artifacts, and get a new build job. This is probably is not what you want. Your data could be compromised by another build project.
Therefore, another option is to set some warning text for shared runners that communicate so that you can ensure your shared runners are under control:
When runners build artifacts, the results can be uploaded and viewed after the pipeline ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access