Why Snap CD: Self-Hosted Terraform Runners with Credential Isolation

Most infrastructure teams run Terraform from a CI pipeline. That pipeline has credentials — cloud provider keys, state backend tokens, maybe a vault token to fetch more secrets. Early on, one pipeline...