Skip to content

Design: Pre-receive Secret Dection configuration UI for Beta

Problem to solve

Add UI configuration options at the instance and project level to enable pre-receive secret detection. See Introduce additional granular controls to toggl... (&13151) for more details

Proposal

  • Introduce a new setting at the project level allowing users to enable pre-receive secret detection.
  • Update the existing instance-level configuration to better align with the project level option. (Working assumption: Enabling on instance-level makes the feature available to enable at the project level. Disabling at the instance-level disables the feature and makes it no longer available for all projects within the instance)
  • UI must follow feature version guidelines
  • The project-level configuration should maintain consistency with other security tools as much as possible. Some deviations are acceptable considering Pre-receive Secret Detection works a bit differently than other tools (the main difference is that it doesn't use CI/CD pipelines to run)
  • Some copy changes may be needed on the project-level Security configuration page if Pre-receive Secret Detection is positioned alongside other CI/CD security tools.

Design Resources:

Edited by Michael Fangman