How to restrict runners to a specific branch and lock the .gitlab-ci.yml from changes?
<p>Right now, anyone that creates a branch in my project and adds a .gitlab-ci.yml file to it, can execute commands on my server using the runner. How can I make it so that only masters or owners can upload CI config files and make changes to them?</p>

<p>I'm using <a href="https://gitlab.com/gitlab-org/gitlab-ci-multi-runner" rel="noreferrer">https://gitlab.com/gitlab-org/gitlab-ci-multi-runner</a> running on bash.</p>