WE WANTED TO USE BASETEN FOR INFERENCE. WE ENDED UP WITH ADMIN ACCESS TO BASETEN GITHUB REPOS

Summary from the TLDR Dev newsletter

An autonomous security scan found a public Harbor registry, then recovered a live GitHub token from a 2023 container image's build history. The token still had broad admin and write access, showing why teams must inspect image metadata as well as layers, use BuildKit secret mounts, expire credentials, and minimize scopes.