Can Your CI/CD Pipeline Keep a Secret?