GitLab Secrets Manager
How Secret Detection can proactively revoke leaked credentials

How Secret Detection can proactively revoke leaked credentials

6/13/2023 · Connor Gilbert

What this post added

This post details the integration of GitLab Secret Detection with Google Cloud for automatic revocation of leaked Google Cloud credentials (service account keys, API keys, OAuth client secrets) in public projects hosted on GitLab.com. This feature is available for GitLab Ultimate users and works by sending detected leaked secrets to Google Cloud for verification and account protection. The post also mentions ongoing work on automatic response for other cloud platforms and GitLab Personal Access Tokens, and expanded protection to all public branches.

Read the original post ↗