Question 220
A developer working in a governed organization reports, the following condition is confirmed: A summary includes private credentials accidentally pasted into a description. What should the team do first?
Explanation
Correct Answer
Given that A summary includes private credentials accidentally pasted into a description, choose "Remove and rotate exposed secrets before sharing". Summarization can propagate confidential inputs if unchecked. This targets the identified problem rather than a neighboring issue.
Incorrect Answers
"Ask Copilot for a PR summary grounded in the actual diff" targets A maintainer wants a concise overview of a lengthy pull request. Summaries organize changes but should not invent unseen results. That differs from A summary includes private credentials accidentally pasted into a description; the required decision here is "Remove and rotate exposed secrets before sharing". Summarization can propagate confidential inputs if unchecked.
The alternative "Verify workflow status and remove unsupported claims" fits another situation: An AI summary states all tests passed when CI is still running. Generated summaries are not live attestations of execution. Here the condition is A summary includes private credentials accidentally pasted into a description; use "Remove and rotate exposed secrets before sharing" instead. Summarization can propagate confidential inputs if unchecked.
The alternative "Compare the summary with changed files and add the migration impact" addresses A large PR summary omits a breaking database migration. Major behavioral consequences can be missed by a terse summary. It does not resolve A summary includes private credentials accidentally pasted into a description; the correct choice is "Remove and rotate exposed secrets before sharing". Summarization can propagate confidential inputs if unchecked.