I think it would be possible to fix it properly and without security risk by all...

Tainnor 6 months ago | parent | context | favorite | on: Why I recommend Renovate over any other dependency...

I think it would be possible to fix it properly and without security risk by allowing pipeline authors to allowlist dependabot and/or specific forks for accessing secrets.