A password encoded twice is still a password
A Kubernetes manifest from a public repository stores a config blob that is base64 inside base64. Decode both layers, then name the database host and the account it exposes.
Briefing
A secret-scanning alert pointed at deploy/billing-config.yaml in a public repository. The value does not look like a password, so the team thinks it is safe.
Kubernetes Secret data is base64-encoded, not encrypted. Someone encoded the value again before putting it there.
ir-workstation · Decoding artifacts
Type help for the command list and objectives for your tasks. Everything runs in this browser.
Up and down arrows walk your history. Ctrl+L clears the screen. Try help, ls, and objectives.