Dogfood Pre-receive SD on internal GitLab projects

Overview

We'd like to dogfood Pre-receive Secret Detection on a handful of internal projects before enabling this for our .com customers. This will increase our confidence in the stability, performance, and customer workflows for the Beta release of this feature.

We plan to take a phased approach to dogfooding this feature internally to get some early feedback prior to enabling it on .com

• Phase 1
  • Static Analysis/SD analyzers (group).
  • Expand to other analyzers (stage).
  • Expand to govern and VR projects (section).
• Phase 2
  • Collaboration with Appsec?
• Phase 3
  • Key GitLab projects:
    • `gitlab-org/gitlab`
    • `gitlab-org/gitaly`
    • `gitlab-org/gitlab-runner`

This Epic will be used to:

• brainstorm the requirements needed to begin dogfooding
• serve as a place to gather interest from internal stakeholders who'd like to dogfood this feature
• coordinate enablement of this feature on those projects

Tasks

• Determine what's needed to begin dogfooding
• Identify which internal projects we should dogfood this feature on
• Monitor performance on projects that have this feature enabled and provide summary of results
• Gather feedback from anyone who dogfoods this feature (workflow improvements, documentation updates, bugs, etc.)

Resources

• Pre-receive SD documentation