diff options
Diffstat (limited to 'app/views/projects/runners/_shared_runners.html.haml')
| -rw-r--r-- | app/views/projects/runners/_shared_runners.html.haml | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/app/views/projects/runners/_shared_runners.html.haml b/app/views/projects/runners/_shared_runners.html.haml index 6a37f444bb7..1f656971f46 100644 --- a/app/views/projects/runners/_shared_runners.html.haml +++ b/app/views/projects/runners/_shared_runners.html.haml @@ -1,7 +1,10 @@ %h3 Shared runners .bs-callout.bs-callout-warning - GitLab Runners do not offer secure isolation between projects that they do builds for. You are TRUSTING all GitLab users who can push code to project A, B or C to run shell scripts on the machine hosting runner X. + Depending on the executor that GitLab Runners use, they may not offer secure + isolation between projects that they do builds for. Read more about + %a{href: "/help/ci/runners/README.md#attack-vectors-in-runners"} + GitLab Runner security. %hr - if @project.shared_runners_enabled? = link_to toggle_shared_runners_namespace_project_runners_path(@project.namespace, @project), class: 'btn btn-warning', method: :post do |