Codecov Bash Uploader compromised
> The actor gained access because of an error in Codecov’s Docker image creation process that allowed the actor to extract the credential required to modify our Bash Uploader script.Docker layers hiding secrets is a big problem. Any solution other than education?