# Shared Secrets in CI Systems Create Security Risks

DevFeed: [Shared Secrets in CI Systems Create Security Risks](<https://devfeed.tech/articles/getting-rid-of-shared-secrets-the-major-design-flaw-of-all-ci-systems-29846.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/shared-secrets-oidc-cicd/>)

Author: info@goteleport.com (Noah Stride)

Published: 2023-03-08T00:00:00Z

Content type: article

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [ci](<https://devfeed.tech/topics/ci.md>), [Security](<https://devfeed.tech/topics/security.md>), [GitHub Actions](<https://devfeed.tech/topics/github-actions.md>), [API keys](<https://devfeed.tech/topics/api-keys.md>), [CircleCI](<https://devfeed.tech/topics/circleci.md>), [ssh](<https://devfeed.tech/topics/ssh.md>)

Tags: [api-keys](<https://devfeed.tech/tags/api-keys.md>), [ci](<https://devfeed.tech/tags/ci.md>), [circleci](<https://devfeed.tech/tags/circleci.md>), [github-actions](<https://devfeed.tech/tags/github-actions.md>), [heroku](<https://devfeed.tech/tags/heroku.md>), [security](<https://devfeed.tech/tags/security.md>), [ssh](<https://devfeed.tech/tags/ssh.md>), [travis-ci](<https://devfeed.tech/tags/travis-ci.md>), [vercel](<https://devfeed.tech/tags/vercel.md>)

## AI overview

The article explains how shared secrets in CI systems and CD pipelines can enable attackers to access production systems and steal customer data. It discusses replacing long-term shared secrets with short-lived, scoped certificates.

## Source excerpt

Shared secrets in CI systems like GitHub Actions and CircleCI pose serious risks. Hackers can exploit secrets to access production systems and steal information.