[hirako2000]

Exactly. More than one bad practice in there. note the secret was never in the repo though. Only in the container image.

[sitkack]

That token gives admin access to all the repos they have access to.