Deploy keys can have significant access to a repository and should be rotated on a regular basis.
Medium
Security