So the CodeRabbit application with access to application secrets still runs in the same virtual machine as untrusted code from the outside?

Howon, you can stop posting that canned response. It's not helping the discussion in any way and matches the lack of detail the other commenters have pointed out.