Your question is Secrets in Disconnected Deploy Pipelines. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
You're setting up a deployment pipeline for software that must be promoted from a connected build environment into a disconnected environment. The pipeline needs to handle credentials for artifact signing, image pulls, service configuration, and runtime access without relying on live calls to external secret stores.
How do you handle secrets management in a CI/CD pipeline that deploys to a disconnected environment?