Self-Hosted CI Runners Are Shared Secrets: Threat Modelling Your Build Infrastructure

Self-Hosted CI Runners Are Shared Secrets: Threat Modelling Your Build Infrastructure A self-hosted CI runner is a machine that executes code written by whoever can open a pull request. Teams adopt them for cost, for hardware access or for network reach into private systems. Those same properties make the runner a high-value target, and the threat...