From dcc6c62209b24e361f755a22c24e845c16c85ead Mon Sep 17 00:00:00 2001 From: David Boreham Date: Wed, 18 Oct 2023 20:16:00 +0000 Subject: [PATCH] Add security warning --- gitea/act-runner.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/gitea/act-runner.md b/gitea/act-runner.md index 8d086ab..f4b09cd 100644 --- a/gitea/act-runner.md +++ b/gitea/act-runner.md @@ -1,5 +1,7 @@ ## Deploying Action Runners +IMPORTANT NOTE: you should be aware that anyone with the ability to modify code run under a CI job in the host Gitea (this includes anyone with commit rights; anyone with the ability to modify any dependency; anyone with the ability to modify dependent components such as base container images) CAN POTENTIALLY COMPROMISE (hack, take over, steal data from) the machine hosting a runner. Proceed with caution. + ### Releases Gitea publishes binary releases of [gitea/act_runner](https://gitea.com/gitea/act_runner/releases) for many platform and architectures, which can be used to deploy new action runners simply.