Secret Detection update: Leaked Personal Access Tokens will soon be revoked

What this post added

This post introduces the automatic revocation of Personal Access Tokens (PATs) when GitLab Secret Detection finds them in public repositories. This feature protects public projects that use Secret Detection and have PATs committed to the default branch. Tokens with the `glpat-` prefix are specifically targeted. The user whose PAT is leaked receives an email notification, and the leaked token is reported in the security widget and Vulnerability Report if merged to the default branch. Users are advised to create new PATs if theirs are revoked. The rollout is phased, with GitLab.com enabling it on or after Jan. 23, 2023, and Self-Managed by default in GitLab 15.9. The feature flag can be used for early opt-in or opt-out before it becomes always active.