[tejado]

Or you directly build the images like GitHub or Azure DevOps so you have your „reproducibility“ again, as everything is inside the images as the hosted ones:

https://github.com/actions/runner-images