trunk/02b46d395c464dad2cfcfa0064887b43665f3ace: Add Github Secret Token to Upload FA3 Wheels Job (#175009)
A major security oversight just exposed PyTorch's GitHub secrets publicly...
Deep Dive
PyTorch developers accidentally committed a GitHub secret token to their public repository in a pull request titled 'Add Github Secret Token to Upload FA3 Wheels Job'. The token was visible in commit 02b46d3 before being removed. This security lapse could have allowed unauthorized access to PyTorch's build and deployment systems. The incident highlights ongoing challenges in securing CI/CD pipelines even for major open-source projects with 97.4k stars.
Why It Matters
This exposes how easily critical secrets can leak, putting major AI infrastructure at risk of compromise.