Skip to content

Make credential inventory GA on gitlab.com with Personal access tokens only

Problem to solve

We released the credential inventory in 12.6 and have released several related credential management features, such as PAT expiration and list and revoke PATs via API; however, these features are largely available only for self-managed customers leaving GitLab.com customers in a painful spot for credential management.

Intended users

User experience goal

Proposal

The credential inventory will need logic to support a GitLab.com implementation. We should:

  • Ensure it is built on top of the Enterprise Users concept
  • Ensure only Project Access Tokens and group-scoped tokens scoped to the group are populated in this inventory

Further details

This issue likely needs to be broken down into several smaller issues.

Permissions and Security

  • Add expected impact to Owner (50) members
Edited by Hannah Sutor