Expected Findings
- CI workflow and logs are downloadable anonymously.
- Backup archive is linked directly from the browser.
Ops Console
DevOps Leak
This environment dashboard auto-loads the deployment workflow and last server logs, then advertises a backup bundle right from the page.
Deploy watcher
Primary Flows
- Backup archive Simulated backup
- Deploy workflow CI config leak
- Server log Verbose runtime output with secrets
Signals
Workflow Secret
SUPABASE_SERVICE_ROLE_KEY: sr_visible_in_ci