GitLab

Secret Detection update: Leaked Personal Access Tokens will soon be revoked

Jan 4, 2023Connor Gilbert
Secret Detection update: Leaked Personal Access Tokens will soon be revoked
SummaryAI, from the source post

This post introduces the automatic revocation of leaked Personal Access Tokens (PATs) found in public repositories by GitLab Secret Detection. It details the conditions under which revocation occurs (public projects, default branch, `glpat-` prefix), the user notification process, and the impact on security reporting. It also outlines the rollout plan for GitLab.com and Self-Managed instances and provides guidance on how users can get protected by enabling Secret Detection and enforcing scan execution. The post also mentions future enhancements to Secret Detection.

More from the Security Control Framework trail