Is it safe to commit deployment.yaml into a public repository?

[mrzzy]

According to Storage Blocks documentation, secrets are obfuscated in the generated deployment.yaml.

Are any secrets embedded into deployment.yaml on prefect deployment build -sb <SOME_BLOCK>? If so, can be obfuscation be relied upon to protect them?

[ghost]

Seems safe to me if all values are referred to through secrets:

    access_token: '{{ prefect.blocks.secret.deployment-token }}'