tl;dr: Security firm Strix pointed its autonomous hacking agent at Baseten's infrastructure and, within 25 minutes, discovered a public Harbor container registry hosting an image whose build history (in `history[].created_by`) contained a live GitHub personal access token from March 2023. The `basetenbot` token still worked in July 2026 and had admin/push access to Baseten's main product repo, GitOps repo, Homebrew tap, and several private customer repos. Baseten's security team rotated the token and locked down the registry within a day. The root cause: passing `GITHUB_TOKEN` as a Docker build ARG instead of using BuildKit secret mounts.