Is it safe to run Terraform on a public CI/CD tool?

For a public project, the pipeline as such will always be visible, but you can disable guest access to the logs: https://docs.gitlab.com/ee/user/project/pipelines/settings.html#visibility-of-pipelines

You also need to ensure that the credentials used by the pipeline are not exposed. My gut feeling is “don’t do this”.

1 Like