Looking at this docs page[1], it doesn't look like the execution environment gets reset completely between each request. Do you partition free/paying users or public/private repos? It seems like an attacker could gain a foothold for longer than just their request with malicious code.
[1] https://docs.aws.amazon.com/lambda/latest/dg/runtimes-contex...