GitHub Action Secrets Security

[0x4007]

Turns out you can export secrets, which means that the bot private key can be exposed fairly easily. This means that its mandatory that we use multisigs as the primary store for value, and consider the bot private keys to be disposable.

We should figure out a way to fully automate bounty payouts but I believe it'll require us to research Gnosis Safe side solutions.

https://stackoverflow.com/questions/63003669/how-can-i-see-my-git-secrets-unencrypted