Your PC Is a Build Agent: Part 2

The security half of the self-hosted runner story. A private repo closes one of three doors. Ephemeral runners, why pull_request_target is a loaded gun, scoping the token nobody thinks about, and what your build can reach on your home network.

• github-actions
• docker
• ci-cd
• security
• devops

Friday, September 18, 2026 | 18 minutes Read

Your PC Is a Build Agent: Self-Hosted GitHub Actions in Docker Desktop

Running a self-hosted GitHub Actions runner as a Docker Desktop container on your local machine is easy. We’ll look at the Dockerfile, the entrypoint, the compose file, and then a few things that bit me when I moved this blog’s CI onto one.

• github-actions
• docker
• ci-cd
• hugo
• devops

Tuesday, August 25, 2026 | 14 minutes Read