[EngVagabond]

Does that automatically run against every PR? What mitigations did you have to put in place for Google security to allow running untrusted code from PRs on internal CI?

[xster]

Semi-automatically. Googlers have to review it.

[serial_dev]

Also known as “manually”.