Feature flags requiring attention for group::pipeline security - 2026-03-01

This is a group level feature flag report containing feature flags that should be evaluated or need action.

Feature flag trends can be found in this dashboard. Prior feature flag reports for ~group::pipeline security can be found via this issue search.

A feature flag is considered end-of-life when it has existed in the codebase for longer than the prescribed lifespan based on feature flag type.

Feature flags needing action

These flags are approaching end-of-life in the next milestone.

Feature flag	Milestone added or updated	End of life milestone	Enabled by default?	Rollout issue

Please take action on these feature flags by performing one of the following options:

These flags have reached their maximum lifespan.

Feature flag	Milestone added or updated	End of life milestone	Enabled by default?	Rollout issue
`ci_jwt_groups_direct` ops \| Introduced by \| Feature issue \| GitLab.com state changes	%17.3	%18.3	❌	[Feature flag] Rollout of `ci_jwt_groups_direct` (gitlab-org/gitlab#474908) • Stan Hu
`secrets_manager` wip \| Introduced by \| Feature issue \| GitLab.com state changes	%17.3	%17.7	❌	[Feature flag] Enable secrets_manager (gitlab-org/gitlab#474432) • Unassigned • Backlog
`slsa_provenance_statement` gitlab_com_derisk \| Introduced by \| Feature issue \| GitLab.com state changes	%18.3	%18.5	❌	[FF] `slsa_provenance_statement` -- Roll out fe... (gitlab-org/gitlab#547866) • Unassigned • Backlog
`group_secrets_manager` wip \| Introduced by \| Feature issue \| GitLab.com state changes	%18.6	%18.10	❌	Roll out `group_secrets_manager` feature flag (gitlab-org/gitlab#578534) • Erick Bajao • 18.10

Please review these feature flags to determine if they are able to be removed entirely.