Add prefix to incoming email tokens
Much like Personal Access Tokens with the glpat-
prefix, adding a prefix to incoming email tokens (available on /-/profile/personal_access_tokens
) would make it easier for secret detection and incident response to be effective.
This prefix will be added on a going-forward basis only. No requirement to migrate existing tokens to the prefix format.
An email token shows up at "Incoming email token" on https://gitlab.com/-/profile/personal_access_tokens. They are available on GitLab.com but some configuration may be needed to enable this type of token in GDK.
These are the tokens used to create issues via email.
Edited by Jessie Young