Telegram bots for build alerts — keep certificates out of the chat

Build pass/fail alerts are useful. Shipping signing certificates or 2FA codes through the same bot is not. Keep secrets on the CI host. Let the bot accept a signed “start the approved job” command and return a log link. Revoke a leaked token immediately.

All notes