3 ms·
If it was GitHub and they were using GitHub auth for circleci, they could have gotten access to injected secrets. Or, if they used GitHub actions, it could have
by bastawhiz 4y ago
If it was GitHub and they were using GitHub auth for circleci, they could have gotten access to injected secrets. Or, if they used GitHub actions, it could have been actions environment variables. It isn't clear that keys were checked into source control.