Secrets in Pipelines
Where should a deployment token used by a CI workflow be stored?
Choose one answer
In the CI system's encrypted secrets store, referenced from the workflow (e.g. ${{ secrets.DEPLOY_TOKEN }}).
${{ secrets.DEPLOY_TOKEN }}
In the README so new team members can find it.
Hard-coded in the workflow YAML in the repository.
In a public gist.