Problem Statement
Design a safe way to use secrets in a pipeline for deploy and tests.
Explanation
Store secrets in the CI vault or a secret manager. Inject at runtime as environment variables or mounted files. Never commit them to the repo.
Scope access with least privilege, mask logs, and rotate keys on a schedule or on exposure.
