Possibly a stupid question but can any of these public CI services support the following: 1) Build containers easily, for each commit? 2) Provide hypervisor a

Possibly a stupid question but can any of these public CI services support the following: 1) Build containers easily, for each commit? 2) Provide hypervisor access for custom VMs? 3) Secure support for 1/2 for possibly hostile PRs? I'm currently using self-hosted gitlab runners for 1/2 but not 3 and interested in alternatives.