Docker and CI/CD · Senior · Question 63 of 75

A secret was printed in a public CI log. What must happen?

1Rename the variable that holds the secret in the workflow
✓Correct answer: Revoke and rotate it, then delete the log and find the cause
3Delete the log; the secret is then safe to keep using

Explanation

Assume it's already been copied. Deleting the log only reduces further exposure; rotation is what actually closes the hole.

Further reading

Test yourself

Take the Docker and CI/CD · Senior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.