Agent secret read before build

How build and debug commands can drift into private secret reads.