`devops::verify` issues without a category label

The following issues have been identified in the devops::verify stage that do not have a category label. These should be applied with urgency so that important issues are not being lost track of.

• gitlab-org/gitlab-runner#37841 (confidential) ~"(confidential)"
• gitlab-org/gitlab-runner#37840 (confidential) ~"(confidential)"
• gitlab-org/gitlab-runner#37839 (confidential) ~"(confidential)"
• gitlab-org/gitlab-runner#37838 (confidential) ~"(confidential)"
• gitlab-org/gitlab#469590 (closed) Default Graphql complexity limit for unauthenticated users is too low for viewing pipelines automation:ml, automation:self-triage-encouraged, devopsverify, grouppipeline execution, sectionci
• gitlab-org/gitlab#469522 (closed) Merge request with fast-forward require to click on merge button automation:ml, automation:self-triage-encouraged, devopsverify, grouppipeline execution, sectionci
• gitlab-org/gitlab#469521 Expand tag variables after evaluating rules:variables to be able to adjust tags from rules automation:ml, automation:self-triage-encouraged, devopsverify, grouppipeline execution, sectionci
• gitlab-org/gitlab#469509 (closed) Cannot access artifacts API for protected branch using CI job token automation:ml, automation:self-triage-encouraged, devopsverify, grouppipeline execution, sectionci, severity3, typebug
• gitlab-org/gitlab#469443 (closed) Private dotenv artifacts not accessible to downstream jobs Category:Build Artifacts, ~"artifacts::access", automation:customer-bug-missing-labels, automation:ml, customer, devopsverify, grouppipeline security, reproduced on GitLab.com, sectionci, typebug, workflowin dev
• gitlab-org/gitlab#469431 An upstream job with needs:artifacts cannot be stopped from running if the artifact isn't created automation:ml, automation:self-triage-encouraged, devopsverify, grouppipeline execution, sectionci
• gitlab-org/gitlab#469402 (closed) New UI for pipeline job statuses makes me feel like I need glasses automation:ml, automation:self-triage-encouraged, devopsverify, grouppipeline execution, sectionci
• gitlab-org/gitlab#469365 (closed) XRay job for RAG is not working anymore automation:ml, devopsverify, groupcustom models, reproduced on GitLab.com, sectionci, typebug
• gitlab-org/gitlab#469093 (closed) User's API rate limit affected other CI jobs automation:ml, automation:self-triage-encouraged, devopsverify, grouppipeline execution, sectionci
• gitlab-org/gitlab#469077 (moved) Docs feedback: glab ci status command doesn't list all the jobs within the pipeline automation:ml, automation:self-triage-encouraged, devopsverify, grouppipeline execution, sectionci
• gitlab-org/gitlab#469033 (closed) Stuck at "Dialing instance ..." using GitLab Runner with docker-autoscaler in Azure automation:self-triage-encouraged, devopsverify, grouprunner, sectionci
• gitlab-org/gitlab#469005 Improve UI for CI_JOB_TOKEN allowlist CI job token, UX, devopsverify, featureenhancement, frontend, grouppipeline security, sectionci, typefeature
• gitlab-org/gitlab#468973 (closed) Convert CI/CD settings "Job token permissions" toggles to radio buttons CI job token, Category:Secrets Management, Deliverable, GitLab Free, UX, devopsverify, documentation, featureenhancement, frontend, grouppipeline security, sectionci, typefeature
• gitlab-org/gitlab-runner#37833 (confidential) ~"(confidential)"
• gitlab-org/gitlab-runner#37832 (confidential) ~"(confidential)"
• gitlab-org/gitlab-runner#37831 (confidential) ~"(confidential)"
• gitlab-org/gitlab#468922 (confidential) ~"(confidential)"
• gitlab-org/gitlab-runner#37830 (confidential) ~"(confidential)"
• gitlab-org/gitlab#468899 (closed) git push using a Project Access Token throws a 'remote: HTTP Basic: Access denied' error from a TAG pipeline only automation:ml, automation:self-triage-encouraged, devopsverify, grouppipeline security, priority3, sectionci, severity3
• gitlab-org/gitlab#468732 Docs Feedback: Shallow cloning with GIT_DEPTH: 1 devopsverify, documentation, grouprunner, sectionci
• gitlab-org/gitlab#468708 (closed) Enhance K8s Executor Logs to Include Special Event Details in GitLab UI GitLab Free, GitLab Premium, GitLab Ultimate, devopsverify, documentation, featureaddition, grouprunner, sectionci, typefeature
• gitlab-org/gitlab-runner#37827 (confidential) ~"(confidential)"
• gitlab-org/gitlab-runner#37826 (confidential) ~"(confidential)"
• gitlab-org/gitlab#468696 (closed) Gitlab on premises cancel pipeline button not operational automation:ml, automation:self-triage-encouraged, devopsverify, grouppipeline execution, sectionci
• gitlab-org/gitlab#468679 (moved) QA failure in qa/specs/features/browser_ui/4_verify/ci_components_catalog/ci_catalog_sorting_spec.rb QA, Quality, automation:ml, devopsverify, failurestale-test, found:master, grouppipeline execution, priority2, sectionci, test, typeignore
• gitlab-org/gitlab#468651 (closed) spec:inputs of type array cannot be used directly in variables automation:ml, automation:self-triage-encouraged, devopsverify, grouppipeline execution, sectionci
• gitlab-org/gitlab#468650 (closed) Associate triggered pipeline with Merge Request automation:ml, automation:self-triage-encouraged, devopsverify, grouppipeline execution, sectionci
• gitlab-org/gitlab#468598 (closed) Add support for revoking Runner Authentication Token to Group Token Revocation Endpoint ProdSecEngMetricTooling Integration, devopsverify, featureenhancement, grouprunner, sectionci, teamProduct Security Engineering, typefeature, workflowready for development
• gitlab-org/gitlab#468540 Add a guide for migrating from Azure Devops to GitLab CI/CD Technical Writing, automation:ml, automation:ml wrong, automation:self-triage-encouraged, devopsverify, docs-only, docsimprovement, documentation, sectionci
• gitlab-org/gitlab#468537 Add @ci.pipeline.iid to the DataDog integration automation:ml, automation:self-triage-encouraged, devopsverify, grouprunner, priority4, sectionci
• gitlab-org/gitlab#468323 (closed) [Feature flag] Rollout of ci_retry_merge_train_jobs devopsverify, feature flag, grouppipeline execution, sectionci
• gitlab-org/gitlab#468248 (closed) Microsoft Teams notifications Integration setting "Notify only broken pipelines" does not generate teams notification Category:Webhooks, automation:ml, automation:self-triage-encouraged, devopsverify, groupimport and integrate, sectionci
• gitlab-org/gitlab#467986 (closed) conccurent jobs from same project on docker executor runnner sometimes mount the same build volume automation:ml, automation:self-triage-encouraged, devopsverify, grouprunner, sectionci
• gitlab-org/gitlab#467978 Brainstorm ideas to integrate GitLab University into GitLab Pipelines surfaces automation:ml, devopsverify, sectionci, typeignore
• gitlab-org/gitlab#467840 (closed) Audit events for groups being added to the CI job token allowlist Category:Secrets Management, devopsverify, grouppipeline security, needs weight, priority2, sectionci, typefeature, workflowrefinement
• gitlab-org/gitlab#467583 CI_JOB_TOKEN - new allowlist setting CI job token, Category:Secrets Management, devopsverify, featureenhancement, grouppipeline security, sectionci, typefeature, workflowproblem validation
• gitlab-org/gitlab#467566 (closed) Dynamic secret support in the GitLab Secrets Manager Category:Secrets Management, devopsverify, featureaddition, grouppipeline security, secrets storage, sectionci, typefeature
• gitlab-org/gitlab#467565 (closed) Database for OpenBao Category:Secrets Management, devopsverify, grouppipeline security, sectionci, typefeature
• gitlab-org/gitlab#467492 Expand CI_JOB_TOKEN Permissions to Include Scopes for Pipeline Metadata CI job token, Category:Secrets Management, automation:ml, automation:self-triage-encouraged, devopsverify, grouppipeline security, sectionci
• gitlab-org/gitlab#467181 (closed) (confidential) ~"(confidential)"
• gitlab-org/gitlab#466433 (closed) Alpine and debian docker images return different error codes in ci automation:ml, automation:self-triage-encouraged, devopsverify, grouprunner, sectionci
• gitlab-org/gitlab#464813 (confidential) ~"(confidential)"
• gitlab-org/gitlab#464812 (confidential) ~"(confidential)"
• gitlab-org/gitlab#464811 (confidential) ~"(confidential)"
• gitlab-org/gitlab#464810 (confidential) ~"(confidential)"
• gitlab-org/gitlab#464809 (confidential) ~"(confidential)"
• gitlab-org/gitlab#463404 (confidential) ~"(confidential)"
• gitlab-org/gitlab#462672 (closed) Update TAGS on v17.0.0 Category:Source Code Management, automation:ml, automation:ml wrong, automation:self-triage-encouraged, awaiting feedback, devopsverify, grouprunner, sectionci
• gitlab-org/gitlab#461484 (closed) Use factories for GroupRunner and ProjectRunner in E2E tests Quality, devopsverify, grouprunner, maintenancerefactor, missed:17.1, sectionci, teamTest Engineering, typemaintenance, workflowin review
• gitlab-org/gitlab#461288 (closed) Restore download links on the tag view Category:Source Code Management, automation:ml, automation:self-triage-encouraged, devopsverify, groupsource code, sectionci
• gitlab-org/gitlab#461155 Documentation: Improve information on using ID Tokens with GCP Category:Secrets Management, devopsverify, docs-only, documentation, external authentication, grouppipeline security, sectionci
• gitlab-org/gitlab#461141 Resolve flaky behaviour during local rspec for spec/graphql/mutations/design_management/upload_spec.rb Category:Design Management, automation:ml, automation:ml wrong, devopsverify, flaky-testtransient bug, groupproduct planning, sectionci
• gitlab-org/gitlab#460775 (closed) Docs - product feedback: Use secure files in CI/CD jobs automation:ml, automation:self-triage-encouraged, devopsverify, documentation, grouprunner, sectionci
• gitlab-org/gitlab#460757 (closed) Feedback: GitLab as a Secrets Manager Category:Secrets Management, ~"Customer feedback", ~"Product Feedback", devopsverify, grouppipeline security, secrets storage, sectionci, typeignore
• gitlab-org/gitlab#460746 Docs - product feedback: Group level environment variable scoping with wildcard automation:ml, automation:self-triage-encouraged, devopsverify, featureconsolidation, groupenvironments, sectionci, typefeature
• gitlab-org/gitlab#460606 Adding access tokens to the GitLab Secrets Manager Category:Secrets Management, devopsverify, direction, featureaddition, grouppipeline security, secrets storage, sectionci, typefeature
• gitlab-org/gitlab#460110 (confidential) ~"(confidential)"
• gitlab-org/gitlab#460077 Frontend: UI to configure job token scope at group level CI job token, Category:Secrets Management, FY25Q2, VerifyP2, devopsverify, frontend, grouppipeline security, sectionci, typefeature
• gitlab-org/gitlab#459978 Add sorting, filtering and search functionality to the Job Token allowlist CI job token, Category:Secrets Management, GitLab Free, UX, devopsverify, grouppipeline security, sectionci, typefeature, workflowproblem validation
• gitlab-org/gitlab#459976 (closed) Allow users to add multiple groups or projects to the Job Token allowlist CI job token, Category:Secrets Management, GitLab Free, UX, devopsverify, grouppipeline security, sectionci, typefeature, workflowproblem validation
• gitlab-org/gitlab#458918 (closed) [Test] spec/features/admin_variables_spec.rb | Instance variables when ci_variables_pages FF is enabled behaves like variable list pagination sorts variables alphabetically in ASC and DESC order Category:Secrets Management, automation:bot-authored, devopsverify, grouppipeline security, maintenanceperformance, priority3, rspec profiling, ~"rspec:slow test", sectionci, severity3, test, typemaintenance
• gitlab-org/gitlab#458917 (closed) [Test] spec/features/admin_variables_spec.rb | Instance variables when ci_variables_pages FF is enabled behaves like variable list pagination can navigate between pages Category:Secrets Management, automation:bot-authored, devopsverify, grouppipeline security, maintenanceperformance, priority3, rspec profiling, ~"rspec:slow test", sectionci, severity3, test, typemaintenance
• gitlab-org/gitlab#458916 (closed) [Test] spec/features/admin_variables_spec.rb | Instance variables when ci_variables_pages FF is enabled behaves like variable list drawer with application setting for protected attribute when application setting is false defaults to unprotected Category:Secrets Management, automation:bot-authored, devopsverify, grouppipeline security, maintenanceperformance, priority3, rspec profiling, ~"rspec:slow test", sectionci, severity3, test, typemaintenance
• gitlab-org/gitlab#458915 (closed) [Test] spec/features/admin_variables_spec.rb | Instance variables when ci_variables_pages FF is enabled behaves like variable list drawer with application setting for protected attribute when application setting is true defaults to protected Category:Secrets Management, automation:bot-authored, devopsverify, grouppipeline security, maintenanceperformance, priority3, rspec profiling, ~"rspec:slow test", sectionci, severity3, test, typemaintenance
• gitlab-org/gitlab#458828 Conditional jobs lose artifacts and do not respect "keep artifacts from most recent successful jobs" Category:Build Artifacts, automation:ml, automation:self-triage-encouraged, devopsverify, grouppipeline security, needs investigation, priority3, sectionci
• gitlab-org/gitlab#458463 (closed) (confidential) ~"(confidential)"
• gitlab-org/gitlab#458316 (confidential) ~"(confidential)"
• gitlab-org/gitlab#458017 Ci::DeleteObjectsWorker jobs saturate queues when object storage unavailable Category:Build Artifacts, ~"artifacts::storage", customer, devopsverify, grouppipeline security, needs investigation, priority3, sectionci, severity3, typebug
• gitlab-org/gitlab#457818 (moved) Solution Validation: Add CI job token and GAT to the Access Token menu Actionable InsightExploration needed, CI job token, Category:Secrets Management, devopsverify, grouppipeline security, sectionci, workflowsolution validation
• gitlab-org/gitlab#457380 (closed) MVC: Tanukey permissions (implementation) Category:Secrets Management, devopsverify, featureaddition, frontend, grouppipeline security, secrets storage, sectionci, typefeature
• gitlab-org/gitlab#457101 Identify settings in Rails console Category:Secrets Management, devopsverify, grouppipeline security, sectionci, typeignore
• gitlab-org/gitlab#456839 Restore a secret Category:Secrets Management, GitLab Ultimate, customer, devopsverify, direction, documentation, featureaddition, grouppipeline security, secrets storage, sectionci, typefeature
• gitlab-org/gitlab#456531 (closed) First item in deploy key project usage does not link to project UX, automation:ml, automation:self-triage-encouraged, bugux, devopsverify, groupenvironments, priority4, severity4, typebug, workflowrefinement
• gitlab-org/gitlab#455445 (closed) GraphQL interface between frontend and backend Category:Secrets Management, devopsverify, grouppipeline security, sectionci
• gitlab-org/gitlab#455191 (closed) Follow-up from "Add application setting for max_artifact_archive_size_bytes" Category:Build Artifacts, backend, devopsverify, frontend, grouppipeline security, sectionci
• gitlab-org/gitlab#454968 (closed) Getting artifact from the archive produces an error CI artifacts, Category:Build Artifacts, backend, devopsverify, grouppipeline security, needs investigation, priority3, reproduced on GitLab.com, sectionci, severity3, typebug
• gitlab-org/gitlab#454627 (confidential) ~"(confidential)"
• gitlab-org/gitlab#453978 Fine tune CI_JOB_TOKEN scope for write_repo CI job token, Category:Secrets Management, UX, customer, devopsverify, direction, featureenhancement, grouppipeline security, sectionci, typefeature
• gitlab-org/gitlab#452388 (closed) After task gitlab:artifacts:migrate_to_local, trying to download artifacts leads to error 500 Category:Build Artifacts, automation:ml, automation:self-triage-encouraged, devopsverify, grouppipeline security, needs investigation, priority3, sectionci, severity3
• gitlab-org/gitlab#452263 CI job token: enable projects to know which allowlists they are on CI job token, Category:Secrets Management, GitLab Free, customer, devopsverify, direction, documentation, grouppipeline security, sectionci, typefeature
• gitlab-org/gitlab#452253 Enforced allowlist for CI job token at group level Category:Secrets Management, GitLab Premium, customer, devopsverify, direction, documentation, grouppipeline security, sectionci, typefeature
• gitlab-org/gitlab#452163 (confidential) ~"(confidential)"
• gitlab-org/gitlab#451993 (closed) CI_JOB_TOKEN Access CI job token, Category:Secrets Management, automation:ml, automation:self-triage-encouraged, customer, devopsverify, grouppipeline security, needs investigation, priority3, sectionci, typeignore
• gitlab-org/gitlab#451976 (closed) Rake task gitlab-rake gitlab:cleanup:list_orphan_job_artifact_final_objects fails with permission denied Category:Build Artifacts, devopsverify, grouppipeline security, priority3, sectionci, severity3, typebug
• gitlab-org/gitlab#451765 "Expired" Tag on multiple Artifacts are confusing Category:Build Artifacts, UX, automation:ml, automation:self-triage-encouraged, devopsverify, grouppipeline security, sectionci
• gitlab-org/gitlab#451612 CI/CD Variables: Allows secrets to be defined at the top level of CI yaml Category:Secrets Management, automation:ml, automation:self-triage-encouraged, devopsverify, grouppipeline security, sectionci, typefeature
• gitlab-org/gitlab#451518 Improve breadcrumbs in pipeline external artifacts page Category:Build Artifacts, UX, devopsverify, featureenhancement, frontend, grouppipeline security, needs investigation, sectionci, typefeature
• gitlab-org/gitlab#451160 (closed) GitLab Secrets Manager - Bring Your Own Key option Category:Secrets Management, GitLab Premium, customer, customer+, devopsverify, direction, documentation, grouppipeline security, secrets storage, sectionci, typefeature
• gitlab-org/gitlab#451151 (closed) [Cells 1.0] Decide what to do with secrets.ci_jwt_signing_key Category:Secrets Management, devopsverify, grouppipeline security, sectionci
• gitlab-org/gitlab#451104 (closed) 'This job could not start because it could not retrieve the needed artifacts' In a job with no "needs" relation or artifact dependencies Category:Build Artifacts, automation:ml, automation:self-triage-encouraged, devopsverify, grouppipeline security, needs investigation, priority3, sectionci, severity3, typebug
• gitlab-org/gitlab#451099 Propagate AI Agents Prompts into AI Gateway automation:ml, devopsverify, groupmlops, sectionci
• gitlab-org/gitlab#451092 (closed) Invalid and inconsistent behavior of CI_JOB_TOKEN when git access set to SSH ONLY and project visibility changes CI job token, Category:Secrets Management, bugfunctional, devopsverify, grouppipeline security, priority3, sectionci, severity3, typebug, workflowplanning breakdown
• gitlab-org/gitlab#448294 (closed) Docs feedback: Deploy an OCI artifact using Flux pushes secret to repository Category:Secrets Management, automation:ml, automation:self-triage-encouraged, devopsverify, grouppipeline security, sectionci
• gitlab-org/gitlab#446039 (closed) Deprecate artifact:public config in favor of artifact:access Category:Build Artifacts, ~"artifacts::access", devopsverify, grouppipeline security, priority4, sectionci
• gitlab-org/gitlab#444552 Allow stop jobs with unmet dependencies to run when environment manually stopped or automatically stopped after period of time customer, devopsverify, environmentsparked, featureaddition, groupenvironments, sectionci, typefeature, workflowsolution validation
• gitlab-org/gitlab#444474 Extend CI_JOB_TOKEN scopes per job CI job token, Category:Secrets Management, automation:ml, automation:ml wrong, automation:self-triage-encouraged, devopsverify, grouppipeline security, sectionci

---

You are welcome to help improve this report.