GitLab Secrets Manager: Govern secrets like your code

T1Covered by 1 source · first reported by GitLab Blog at 15 Oct, 00:00 UTC

Credentials often start in an engineer's local dev environments, then get copied into unscoped CI/CD variables to keep pipelines running. Stored there as a raw value rather than a reference to a scoped secret, a signing key reaches every job in the pipeline — compromised or not. Standing up a…

Sources

• T1GitLab Secrets Manager: Govern secrets like your codeGitLab Blog15 Oct, 00:00