Roll out dark launch of SPP for public projects

Problem to solve

As part of Dark Launch SPP for all public project (#546115 - closed) • Craig Smith • 18.2, we've added the feature flag secret_detection_enable_spp_for_public_projects to enable dark launch of SPP for public projects. To ensure SDS can handle the extra load, we'll do a phased rollout using the feature flag while minimizing risk and ensuring we can quickly respond to any issues that arise.

Pre-release test

  • Create a test project
    • Project is a Free, public project
  • Enable secret_detection_enable_spp_for_public_projects for the above project
  • Push a secret to the project. The secret should be accepted and not blocked by SPP
  • Check the SDS logs to ensure the secret was checked - (how do we do this?)

Release incremental steps

  1. Enable 1% of projects - https://gitlab.slack.com/archives/C101F3796/p1755561741184859
  2. Enable 5% of projects - https://gitlab.slack.com/archives/C101F3796/p1755646156563959
  3. Enable 10% of projects - https://gitlab.slack.com/archives/C101F3796/p1755664044731769
  4. Enable 25% of projects - https://gitlab.slack.com/archives/C101F3796/p1758065109393819
  5. Enable 50% of projects
  6. Enable 75% of projects
  7. Enable 100% of projects

Rollout Plan

- Pending - Completed - Failed

Release step Target Date Status # of projects enabled Notes
Enable 1% of projects 2025-08-19
Enable 5% of projects 2025-08-20 - 9am AEST
Enable 10% of projects 2025-09-16 DONE
Enable 25% of projects 2025-09-17 DONE
Enable 50% of projects 2025-09-18
Enable 75% of projects 2025-09-22
Enable 100% of projects 2025-09-23
Edited by Craig Smith