Codecov Bash Uploader compromised
> The actor gained access because of an error in Codecov’s Docker image creation process that allowed the actor to extract the credential required to modify our Bash Uploader script.<p>Docker layers hiding secrets is a big problem. Any solution other than education?