How Secret Detection can proactively revoke leaked credentials
Jun 13, 2023Connor Gilbert
Summary
This post details an expansion of GitLab Secret Detection's automatic response capabilities, specifically integrating with Google Cloud to automatically revoke leaked Google Cloud service account keys, API keys, and OAuth client secrets found in public projects on GitLab.com. This integration is available for GitLab Ultimate users and is enabled by default for projects using Secret Detection. It builds upon existing automatic response features for GitLab Personal Access Tokens and extends protection to any public branch.
More from the GitLab Secrets Manager trail
- GitLab Secrets Manager adds ESO, Terraform, API support
- Manage CI/CD credentials with GitLab Secrets Manager
- A leaked personal access token shouldn't expose every project its owner can reach. Fine-grained PATs scope each token’s permissions to the job.
- Solving complex challenges with GitLab Duo Workflow
- How to scan a full commit history to detect sensitive secrets