Software Supply Chain
CI Runner
Also: build runner
The temporary machine on which a CI pipeline's jobs execute, with whatever secrets the job is given.
In more detail
A runner checks out the code and runs each step as commands. Because steps run with the job's permissions, a malicious or tampered step can read the same secrets the legitimate ones use, which is why runners should hold only narrow, short-lived credentials.