Problem
Installing dependencies at runtime enables arbitrary code execution and outbound network access.
Proposed change
- Default to pre-built images only.
- Runtime dependency install requires explicit job opt-in.
Acceptance criteria
- Untrusted jobs cannot fetch packages at runtime.
- Docs recommend image-based workflows.
Problem
Installing dependencies at runtime enables arbitrary code execution and outbound network access.
Proposed change
Acceptance criteria