Where keeping it cost them

Travis CI

Exposed the environment variables of thousands of projects

A configuration issue in the CI service leaked secrets that projects had stored there, across thousands of repositories.

Removed: nothing. Project secrets sat in CI configuration, where a single configuration issue exposed them.

Outcome: environment variables and secrets exposed from thousands of open source projects.

The Travis CI 2021 security incident exposed environment variables and secrets from thousands of open source projects due to a configuration issue.

Source: Travis CI, security bulletin (13 September 2021)

More cases like this