I’m no expert in this but I’m guessing GH’s higher tiers provide much more “actions” and whatnot than Codeberg does. AFAICS Gitlab might be the only alternative that even has the mechanisms that could be exploited.

But executing code in a comment, that’s harsh in any case. I mean, even I would’ve known how to prevent that right from the start. I think.