
12/20/2019 · Greg Johnson
What this post added
Introduced Token-Hunter, a new tool developed by GitLab's Red Team to scan public GitLab assets (issues, discussions, snippets, merge requests) for unintentionally leaked sensitive data such as API tokens. The tool implements request retries and dynamic page-size reduction algorithms to handle large data pulls reliably. It aims to complement existing secret-scanning tools by focusing on GitLab-specific content types.