Docker and CI/CD · Middle · Question 47 of 75
Why are self-hosted runners risky for public repositories?
- 1GitHub charges extra for each self-hosted job
- 2They can't run Docker containers at all
- ✓Correct answer: PRs from anyone could run code on your machine
Explanation
A malicious PR can leave persistent malware on a non-ephemeral runner. Use GitHub-hosted runners for public repos or isolate self-hosted ones per job.