A security team is running vulnerability scans against a CI/CD pipeline. The reports show that RDBMS secrets were found hardcoded in Ansible scripts…

The internal network is at risk of being compromised if an attacker gains access to the Ansible scripts,

as the scripts contain hardcoded secrets for the RDBMS which is accessible from a jump server in a

public network. This presents a risk as the secrets can be used to gain access to the RDBMS, and from

there, the attacker could potentially gain access to the internal network. Additionally, the entire

CI/CD-related infrastructure could be at risk if the attacker is able to gain access to the RDBMS, as

they could potentially manipulate the data or scripts in order to cause disruption or damage.