drop gitlab ci job log · parse stage + step + secret usage · runs locally
flags secret echo attempts · curl with tokens · docker login hints · failed deploy after secret mount · masked values stay opaque
masked secret values are opaque — reference patterns only · heuristic screener · indicative only · not definitive proof