A CI/CD pipeline can deploy production code using a long-lived secret stored in source control. What should treatment address?

1. An assumption that private repositories cannot leak secrets
2. Only the number of commits each day
3. Secret exposure, privilege scope, rotation, and secure workload identity
4. Only the pipeline's display name