GitLab Secrets Manager hits GA in 19.5 and scopes credentials to the job
Open the CI/CD settings of any GitLab project older than two years and count the masked variables. (Go on. I'll wait.) Each one is a raw value sitti…
Latest News
⚑ Report a ProblemTech news from the best sources
All topics
AI
Gear
News
Tech
agents
ai
api
architecture
automation
beginners
career
database
devchallenge
devops
discuss
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
security
showdev
testing
tutorial
typescript
webdev
Prioritising CVE-2026-85706 Work: What a Read on a GitLab Host Is Worth
Prioritising CVE-2026-85706 Work: What a Read on a GitLab Host Is Worth Vulnerability overview CVE-2026-85706 gives an unauthenticated caller a file…
Scoped API Keys for CI Pipelines: Least-Privilege Rotation After Build Log Leaks
Short answer: give each CI job a short-lived, narrowly scoped API key, keep it out of build output, and make revocation a tested path rather than an…
SealedSecrets: Storing Secrets in Git Without the Risk
A base64-encoded string in a Git repo is not a secret. It's plaintext with one extra step, and echo "cGFzc3dvcmQ=" | base64 -d undoes that step in a…
The Developer's Guide to Environment Variables and Secrets Management
Why This Deserves More Attention Than It Gets Credential leaks are one of the most common and preventable security incidents in software. Bots activ…