Deleting a secret from your Docker image doesn't delete it from your build history
An autonomous hacking agent discovered a live GitHub admin token in Baseten's infrastructure by pulling a public Docker image and reading its build history, according to a writeup by Strix. The token, dating from March 2…