Leaked LiteLLM master key exposed GitHub tokens and release pipeline A leaked LiteLLM master key allowed attackers to access connected secrets, including GitHub tokens, and compromise the software release pipeline, as detailed in the LiteLLM Incident Report. The exposure made application layer certification a pivot point for source control and release operations. The case highlights how AI gateway keys can function as high-value infrastructure credentials. Once exposed, they may provide indirect access to code repositories, automation paths, and artifact delivery, extending the impact far beyond the initial service boundary. Open sources - closed narratives.