...
secrets were not exposed
Recommend disabling this CI setting: Pass secrets to builds from forked pull requests
Recommend rotating credentials
Unfortunately, disabling the "pass secrets to forked PRs" means that Sonar can't run on PRs
- plan is to temporarily disable this while we figure out a solution