Platform & DevOps·Pipelines, promotion and GitOps
the build runs on your own machines so it can reach the private network, and now you own patching and isolating it.
Self-hosted runner
Also calledprivate runner, self-managed agent
Running pipeline jobs on infrastructure you operate rather than the provider's. It is chosen for network access to private resources, for specialised hardware or for cost at volume, and it moves responsibility for isolation onto you. A persistent runner shared between jobs is a genuine security problem: one job can leave things behind for the next, which is why ephemeral, single-use runners are the safe default.