Allow Job Logs to auto-expire based on gitlab-ci configuration

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

  • Close this issue

Problem to solve

Removing secrets from job log

Intended users

Users that out put sensitive data in jobs

Further details

Have an pipeline that outputs inital passwords or API Keys

Proposal

Make an .gitlab-ci.yml that allows to expire job logs by default for specific pipelines

Permissions and Security

User should have the right to delete job log (would be done/executed by a cronjob anyway?)

Documentation

What does success look like, and how can we measure that?

it is possible to create something like expire_joblog: 5m and jobs with that should delete the job output after 5 minutes

What is the type of buyer?

Enterprise

Links / references

Edited Aug 04, 2025 by 🤖 GitLab Bot 🤖
Assignee Loading
Time tracking Loading