[free652]

Read from the ENV variables of a container.

[ahofmann]

And someone was stupid enough to put a reusable tailscale auth key in there.

[selfmodruntime]

I'm willing to bet that 95% of people using tailscale for CI have a 90 day (max days) ephemeral, reusable auth key somewhere in their setup.