Trusted publishing and short-lived tokens

GitGuardian finds a Shai-Hulud variant sweeping 469 credential paths across CI/CD and AI configs

The count of places this worm looks for secrets more than doubled between builds, and the additions sit in CI/CD and developer tooling, which is where the standing tokens that make a supply chain attack portable actually live.