Publicly exposed Kubernetes configuration secrets pose a significant risk of supply chain attacks, with credentials for accessing container image registries being stored in public repositories.