Docker and CI/CD · Senior · Question 35 of 75
Why should changes to .github/workflows get stricter review?
- 1YAML errors there break the Git repository itself
- 2Workflow files are ignored unless an admin approves them
- ✓Correct answer: Workflows control secrets and deploys, so edits can exfiltrate them
Explanation
A workflow change can print secrets or deploy anything. CODEOWNERS for the folder plus required reviews make the pipeline part of the trusted surface.