ETA on GHA self-hosted runner security audit?

[Chesnay Schepler]

Hello,

In https://issues.apache.org/jira/browse/INFRA-23086 it was mentioned 
that a security audit of self-hosted runners for github actions is being 
conducted at the moment, and that until this is complete no significant 
number of self-hosted runners can be set up.
This came as a bit of a surprise to us (the Flink project); we wanted to 
complete our migration to github actions within the next 2-3 weeks, 
which is now effectively blocked.

I wanted to ask whether there is some form of ETA on when this audit is 
complete.

Regards,
Chesnay