drop drone ci build log · parse step output · runs locally
flags secret from/to env · plugin pulls · privileged docker steps · non-zero exit codes
heuristic screener · drone log format varies by version and runner — not definitive proof · best-effort stage/step parsing