Also i mean... Putting your software forge with cicd on publicly accessible infra isn't the wisest security posture.