CI/CD Minute Quotas and Abuse Prevention
How to prevent crypto mining abuse on GitLab.com SaaS

How to prevent crypto mining abuse on GitLab.com SaaS

5/17/2021 · GitLab

What this post added

This post details the implementation of CI/CD minute quotas for public projects on GitLab.com to prevent abuse, specifically cryptocurrency mining. It outlines the gradual rollout strategy, starting with new free users and potentially extending to existing accounts. The post also lists several technical improvements already implemented to mitigate pipeline abuse, such as failing jobs when quotas are exceeded, restricting namespace creation via API, and ensuring pipelines don't run for blocked users or deleted accounts. It also mentions the inclusion of public projects in quota calculations and the ongoing effort to harden the pipeline system against abuse.

Read the original post ↗