GitLab

Fine-grained permissions for job tokens is now GA

Aug 26, 2025Alex Mark
Fine-grained permissions for job tokens is now GA
SummaryAI, from the source post

This post announces the General Availability of fine-grained permissions for CI/CD job tokens. It details the initial set of resources for which granular permissions can be applied (repositories, deployments, environments, jobs, packages, pipelines, releases, secure files, Terraform state) and explains the security benefits, including reducing attack surface, eliminating dependency on long-lived tokens, and preparing for machine-based identity. It also provides guidance for getting started by auditing critical pipelines and enabling the opt-in capability.

More from the Project and User Grouping trail