GitHub Actions on a self-hosted runner can execute arbitrary code from pull requests, and the runner typically has administrative privileges, so running deployments on the same machine exposes the application host to potentially untrusted code and resource contention.

433a6ea5-3b93-42a4-a1e9-05ff26710dcd