Skip to content

Add pipeline trigger tokens finder

What does this MR do and why?

Resolves #421137 (closed)

Database

Queryplan: https://console.postgres.ai/shared/a1bdb949-3588-481a-8460-6eda709d4a82

How to set up and validate locally

  1. Run gdk/gitpod server
  2. Login and navigate to Settings > CI/CD > Pipeline Triggers > Expand, then create at least one trigger
  3. Visit http://127.0.0.1:3000/-/graphql-explorer and query for all pipelineTriggers:
query {
  project(fullPath: "gitlab-org/gitlab-shell") {
    pipelineTriggers {
      edges {
        node {
          token
          id
          canAccessProject
          description
          hasTokenExposed
          owner {
            id
          }
        }
      }
    }
  }
}

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Missy Davies

Merge request reports