
6/13/2023 · Connor Gilbert
What this post added
This post details the integration of GitLab Secret Detection with Google Cloud for automatic revocation of leaked Google Cloud credentials (service account keys, API keys, OAuth client secrets) in public projects hosted on GitLab.com. This feature is available for GitLab Ultimate users and works by sending detected leaked secrets to Google Cloud for verification and account protection. The post also mentions ongoing work on automatic response for other cloud platforms and GitLab Personal Access Tokens, and expanded protection to all public branches.