01Codecov 2021: The Bash Uploader Compromise That Exposed CI SecretsCodecov's 2021 compromise turned a widely downloaded CI uploader into a secret-exfiltration path after an attacker recovered a cloud credential from a Docker image layer.↗