container-security

Baseten lost production GitHub admin in 25 minutes

A 2023 build left a GitHub admin token in a Baseten container image's history. Three years later it still worked, and an AI pentest agent found it in 25 minutes.