Stop storing your GitHub App private key in GitHub Secrets

In March 2026, the compromise of Trivy — a vulnerability scanner used in thousands of CI/CD pipelines...