Zscaler urges zero trust for self-hosted GitHub runners

Zscaler has published guidance on securing self-hosted GitHub runners with its Zero Trust Cloud platform, arguing that traditional firewalls leave software development pipelines exposed to supply chain attacks. The company cites a Sonatype report tracking over 454,600 malicious packages in a year, and highlights risks such as lateral movement and secret exfiltration.

Zscaler’s platform hides runners from the network, enforces least-privilege access, and provides TLS inspection and data protection.