GitLab Secrets Manager
How to scan a full commit history to detect sensitive secrets

How to scan a full commit history to detect sensitive secrets

2/6/2025 · Noah Ing

What this post added

This post introduces the capability to scan a repository's full commit history for sensitive secrets using GitLab Secret Detection by setting the `SECRET_DETECTION_HISTORIC_SCAN` variable to `true`. This extends the existing secret detection functionality to cover historical data, including deleted files and branches, thereby enhancing the security posture by identifying and mitigating risks from past secret exposures.

Read the original post ↗