Scrubbing tokens from source code is not enough, as shown by the publishing of a Python Software Foundation access token with administrator privileges to a container image on Docker Hub.

Written in Rust, the PyApp utility wraps up Python programs into self-contained click-to-run executables. It might be the ...