https://marcyoung.us/post/zuckerpunch/ https://marcyoung.us/post/zuckerpunch/ Facebook had this exact problem recently with the pytorch repo. Their self hosted

https://marcyoung.us/post/zuckerpunch/ https://marcyoung.us/post/zuckerpunch/ Facebook had this exact problem recently with the pytorch repo. Their self hosted CI runners would run on all PRs, and it could leak all sorts of stuff.