That doesn't solve the same problem. GitHub actions in the standard setup needs to run untrusted code and so you essentially need a VM. You can lock it down a

That doesn't solve the same problem. GitHub actions in the standard setup needs to run untrusted code and so you essentially need a VM. You can lock it down at the cost of sacrificing features and usability, but that's a tradeoff.