GitHub Rotates Keys After Learning of Flaw That Could Allow Access to Credentials

In late December, GitHub learned through its Bug Bounty program about a vulnerability that allowed access to environment variables in a production container. GitHub.com has been patched and affected credentials…