{"id":7237,"date":"2024-03-06T09:30:00","date_gmt":"2024-03-06T07:30:00","guid":{"rendered":"https:\/\/www.almtoolbox.com\/blog\/?p=7237"},"modified":"2024-03-07T08:50:31","modified_gmt":"2024-03-07T06:50:31","slug":"gitlab-github-secret-leak","status":"publish","type":"post","link":"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/","title":{"rendered":"Using GitLab? Your users leave secrets in git repos much more than you thought"},"content":{"rendered":"\n
<\/div>\n\n\n
\n
\"git<\/figure>\n<\/div>\n\n\n
<\/div>\n\n\n\n

Your users leave secrets in git repos much more than you thought, and there’s a new way to resolve it<\/strong><\/h2>\n\n\n\n

Imagine accidentally leaking sensitive information online more than a dozen times a minute! That’s the alarming rate at which secret keys are being exposed on public repositories according to GitHub<\/em>. In just the first eight weeks of 2024, they’ve detected over 1 million leaked secrets. This highlights the critical need for better safeguards to prevent these accidental exposures (see here<\/a>).<\/p>\n\n\n\n

Given the urgency, GitHub recently announced that they will offer the feature for free on public repos, and they recently changed the default behavior to scan and prevent adding secrets (for private repo it is provided in the Enterprise edition only).<\/p>\n\n\n\n

And what about GitLab?<\/h3>\n\n\n\n

GitLab offers scanning in two ways, however neither fully covers that situation at the moment:<\/p>\n\n\n\n

The first way allows you to scan files content, however it works only after <\/em>it has been pushed already…  (and in GitLab Ultimate edition only).
Note: in that case, completely removing the version out of the repo is very complex and not trivial at all.<\/p>\n\n\n\n

The second way allows you to scan before you push, however it does not scan file content <\/em>but file suffix only… (and available in GitLab Premium edition or higher).<\/p>\n\n\n\n

In comparison, GitHub does allow you to scan files content even before you push.<\/p>\n\n\n\n

That\u2019s why we thought about an immediate resolution to GitLab where we can help you to gain full coverage!<\/p>\n\n\n\n

Resolution:<\/h3>\n\n\n\n

You should scan for secrets even before<\/em> your users commit changes to repo – and by scanning files content – and prevent it from being pushed to the central repo in GitLab.<\/p>\n\n\n\n

Our team is trained to provide this as a professional service \u2013 we can develop that missing piece for you, as a tailor-made solution you can deploy across all GitLab users and repos you have.To get more information please contact us (details are below)<\/p>\n\n\n\n

Do you have a Secrets Management tool in place?<\/h3>\n\n\n\n

If not \u2013 we can help here as well (we provide and support a variety of Secrets Management solutions).<\/p>\n\n\n\n

ALM-Toolbox (https:\/\/almtoolbox.com<\/a>) provides licenses and professional services (hands-on consulting) on top of git, GitLab and GitHub including complementary tools such as Jira, Kubernetes, Jenkins, Terraform, HashiCorp Vault, ArgoCD and more. Contact us: gitlab@almtoolbox.com<\/a> or call us 866-503-1471 <\/em><\/strong><\/h4>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Your users leave secrets in git GitLab repos much more than you thought, and there’s a new way to resolve it<\/p>\n","protected":false},"author":10,"featured_media":7238,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[150,166,172],"tags":[441,370,466,467,468],"class_list":["post-7237","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-git","category-gitlab","category-gitlab-ci","tag-appsec","tag-gitlab-vs-github","tag-secret-leak","tag-secrets-management","tag-vault"],"yoast_head":"\nUsing GitLab? Your users leave secrets in git repos much more than you thought - ALMtoolbox News<\/title>\n<meta name=\"description\" content=\"Your users leave secrets in git GitLab repos much more than you thought, and there's a new way to resolve it\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Using GitLab? Your users leave secrets in git repos much more than you thought - ALMtoolbox News\" \/>\n<meta property=\"og:description\" content=\"Your users leave secrets in git GitLab repos much more than you thought, and there's a new way to resolve it\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/\" \/>\n<meta property=\"og:site_name\" content=\"ALMtoolbox News\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/almtoolbox.israel\/\" \/>\n<meta property=\"article:published_time\" content=\"2024-03-06T07:30:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-03-07T06:50:31+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2024\/03\/115166903_m_normal_none.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2508\" \/>\n\t<meta property=\"og:image:height\" content=\"1672\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Tamir Gefen\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Dikla\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Tamir Gefen\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/\"},\"author\":{\"name\":\"Tamir Gefen\",\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/#\/schema\/person\/409e35aa3486f92208065230bb6ebb63\"},\"headline\":\"Using GitLab? Your users leave secrets in git repos much more than you thought\",\"datePublished\":\"2024-03-06T07:30:00+00:00\",\"dateModified\":\"2024-03-07T06:50:31+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/\"},\"wordCount\":411,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2024\/03\/115166903_m_normal_none.jpg\",\"keywords\":[\"appsec\",\"gitlab vs github\",\"secret leak\",\"secrets management\",\"vault\"],\"articleSection\":[\"Git\",\"GitLab\",\"GitLab CI\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/\",\"url\":\"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/\",\"name\":\"Using GitLab? Your users leave secrets in git repos much more than you thought - ALMtoolbox News\",\"isPartOf\":{\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2024\/03\/115166903_m_normal_none.jpg\",\"datePublished\":\"2024-03-06T07:30:00+00:00\",\"dateModified\":\"2024-03-07T06:50:31+00:00\",\"description\":\"Your users leave secrets in git GitLab repos much more than you thought, and there's a new way to resolve it\",\"breadcrumb\":{\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/#primaryimage\",\"url\":\"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2024\/03\/115166903_m_normal_none.jpg\",\"contentUrl\":\"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2024\/03\/115166903_m_normal_none.jpg\",\"width\":2508,\"height\":1672},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.almtoolbox.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Using GitLab? Your users leave secrets in git repos much more than you thought\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/#website\",\"url\":\"https:\/\/www.almtoolbox.com\/blog\/\",\"name\":\"ALMtoolbox News\",\"description\":\"All the news of ALMtoolbox\",\"publisher\":{\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.almtoolbox.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/#organization\",\"name\":\"ALMtoolbox\",\"url\":\"https:\/\/www.almtoolbox.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2015\/10\/logo.png\",\"contentUrl\":\"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2015\/10\/logo.png\",\"width\":410,\"height\":190,\"caption\":\"ALMtoolbox\"},\"image\":{\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/almtoolbox.israel\/\",\"https:\/\/www.linkedin.com\/company\/almtoolbox\/\",\"https:\/\/www.youtube.com\/user\/GoMidjets\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/#\/schema\/person\/409e35aa3486f92208065230bb6ebb63\",\"name\":\"Tamir Gefen\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.almtoolbox.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d3d4df00aa386b2805c42441dfebcedd46abf25846febb352f00c11524d994c4?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d3d4df00aa386b2805c42441dfebcedd46abf25846febb352f00c11524d994c4?s=96&d=mm&r=g\",\"caption\":\"Tamir Gefen\"},\"sameAs\":[\"https:\/\/x.com\/Dikla\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Using GitLab? Your users leave secrets in git repos much more than you thought - ALMtoolbox News","description":"Your users leave secrets in git GitLab repos much more than you thought, and there's a new way to resolve it","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/","og_locale":"en_US","og_type":"article","og_title":"Using GitLab? Your users leave secrets in git repos much more than you thought - ALMtoolbox News","og_description":"Your users leave secrets in git GitLab repos much more than you thought, and there's a new way to resolve it","og_url":"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/","og_site_name":"ALMtoolbox News","article_publisher":"https:\/\/www.facebook.com\/almtoolbox.israel\/","article_published_time":"2024-03-06T07:30:00+00:00","article_modified_time":"2024-03-07T06:50:31+00:00","og_image":[{"width":2508,"height":1672,"url":"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2024\/03\/115166903_m_normal_none.jpg","type":"image\/jpeg"}],"author":"Tamir Gefen","twitter_card":"summary_large_image","twitter_creator":"@Dikla","twitter_misc":{"Written by":"Tamir Gefen","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/#article","isPartOf":{"@id":"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/"},"author":{"name":"Tamir Gefen","@id":"https:\/\/www.almtoolbox.com\/blog\/#\/schema\/person\/409e35aa3486f92208065230bb6ebb63"},"headline":"Using GitLab? Your users leave secrets in git repos much more than you thought","datePublished":"2024-03-06T07:30:00+00:00","dateModified":"2024-03-07T06:50:31+00:00","mainEntityOfPage":{"@id":"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/"},"wordCount":411,"commentCount":0,"publisher":{"@id":"https:\/\/www.almtoolbox.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/#primaryimage"},"thumbnailUrl":"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2024\/03\/115166903_m_normal_none.jpg","keywords":["appsec","gitlab vs github","secret leak","secrets management","vault"],"articleSection":["Git","GitLab","GitLab CI"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/","url":"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/","name":"Using GitLab? Your users leave secrets in git repos much more than you thought - ALMtoolbox News","isPartOf":{"@id":"https:\/\/www.almtoolbox.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/#primaryimage"},"image":{"@id":"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/#primaryimage"},"thumbnailUrl":"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2024\/03\/115166903_m_normal_none.jpg","datePublished":"2024-03-06T07:30:00+00:00","dateModified":"2024-03-07T06:50:31+00:00","description":"Your users leave secrets in git GitLab repos much more than you thought, and there's a new way to resolve it","breadcrumb":{"@id":"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/#primaryimage","url":"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2024\/03\/115166903_m_normal_none.jpg","contentUrl":"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2024\/03\/115166903_m_normal_none.jpg","width":2508,"height":1672},{"@type":"BreadcrumbList","@id":"https:\/\/www.almtoolbox.com\/blog\/gitlab-github-secret-leak\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.almtoolbox.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Using GitLab? Your users leave secrets in git repos much more than you thought"}]},{"@type":"WebSite","@id":"https:\/\/www.almtoolbox.com\/blog\/#website","url":"https:\/\/www.almtoolbox.com\/blog\/","name":"ALMtoolbox News","description":"All the news of ALMtoolbox","publisher":{"@id":"https:\/\/www.almtoolbox.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.almtoolbox.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.almtoolbox.com\/blog\/#organization","name":"ALMtoolbox","url":"https:\/\/www.almtoolbox.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.almtoolbox.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2015\/10\/logo.png","contentUrl":"https:\/\/www.almtoolbox.com\/blog\/wp-content\/uploads\/\/2015\/10\/logo.png","width":410,"height":190,"caption":"ALMtoolbox"},"image":{"@id":"https:\/\/www.almtoolbox.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/almtoolbox.israel\/","https:\/\/www.linkedin.com\/company\/almtoolbox\/","https:\/\/www.youtube.com\/user\/GoMidjets"]},{"@type":"Person","@id":"https:\/\/www.almtoolbox.com\/blog\/#\/schema\/person\/409e35aa3486f92208065230bb6ebb63","name":"Tamir Gefen","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.almtoolbox.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d3d4df00aa386b2805c42441dfebcedd46abf25846febb352f00c11524d994c4?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d3d4df00aa386b2805c42441dfebcedd46abf25846febb352f00c11524d994c4?s=96&d=mm&r=g","caption":"Tamir Gefen"},"sameAs":["https:\/\/x.com\/Dikla"]}]}},"_links":{"self":[{"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/posts\/7237","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/comments?post=7237"}],"version-history":[{"count":11,"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/posts\/7237\/revisions"}],"predecessor-version":[{"id":7253,"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/posts\/7237\/revisions\/7253"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/media\/7238"}],"wp:attachment":[{"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/media?parent=7237"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/categories?post=7237"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.almtoolbox.com\/blog\/wp-json\/wp\/v2\/tags?post=7237"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}