Research and document prior art

[0x2b3bfa0]

Blog posts

• https://blog.aquasec.com/travis-ci-security
• https://edoverflow.com/2019/ci-knew-there-would-be-bugs-here
• https://secapps.com/tutorials/finding-secrets-in-travis-ci
• https://blog.shashank.co/2019/05/finding-leaks-in-travis-logs-automated.html

Community discussions

• https://travis-ci.community/t/security-bulletin/12081
• https://travis-ci.community/t/leaks-of-secrets/7255
• https://travis-ci.community/t/questions-on-security-bulletin-repository-secrets-leak-to-prs/12094/9