# Retry with exponential backoff
def with_retry(func, max_attempts=3, base_delay=1):
    for attempt in range(max_attempts):
        try:
            return func()
        except Exception as e:
            if attempt == max_attempts - 1:
                raise
            delay = base_delay * (2 ** attempt)
            time.sleep(delay)

# Use environment variables or secret stores
env:
  API_KEY: ${{ secrets.API_KEY }}
  DATABASE_URL: ${{ secrets.DATABASE_URL }}

# Ensure operations can be safely retried
def process_with_idempotency(record_id, data):
    existing = get_by_id(record_id)
    if existing and existing.checksum == compute_checksum(data):
        return existing  # Already processed
    return upsert(record_id, data)