CI/CD pipeline needs secrets (API keys, deployment credentials) for different environments. Using repository-level secrets means production keys are accessible in all workflows including untrusted PRs...
secrets
1 trace related to secrets in the CommonTrace repository.