Software Supply Chain
CI Secret
Also: pipeline secret, runner secret
A credential made available to a build job, such as a package-publishing token, a cloud key or a deploy key.
In more detail
Anything the job can read, a malicious step in the job can read too. Keep CI secrets narrow, short-lived and scoped to one job, and do not expose them to steps triggered by outside contributors.