Token Management Working Group

On this page

Attributes
Exit Criteria
Roles and Responsibilities
Direction

Attributes

Property	Value
Date Created	August 16, 2022
Date Ended	TBD
Slack	#wg_token (only accessible from within the company)
Google Doc	Token Management Working Group Agenda (only accessible from within the company)

Exit Criteria

The Token Management Working Group will deliver:

A reliable and repeatable method for identifying leaked tokens
An established policy of token management aligned and supported across engineering
Thorough logging capabilities and visibility of token use
Recommendations for improvement to GitLab's Secret Detection

Roles and Responsibilities

Working Group Role	Person	Title
Facilitator	James Ritchey	Sr. Security Engineering Manager
Executive Stakeholder	Johnathan Hunt	VP of Security
Member	Joaquin Fuentes	Director Security Operations
Member	Valentine Mairet	SIRT Manager
Member	Philippe Lafoucrière	Security Architect
Member	Andrew Kelly	AppSec Manager
Member	Chris Moberly	Red Team Manager
Member	Connor Gilbert	Sr. Product Manager, Secure:Static Analysis
Member	Grzegorz Bizon	Principal Engineer, Ops
Member	Stan Hu	Engineering Fellow
Member	Michelle Gill	Senior Engineering Manager, Manage
Member	Hannah Sutor	Senior Product Manager, Manage:Auth
Member	Alex Hanselka	Senior Site Reliability Engineer
Member	Dominic Couture	Staff Security Engineer, Application Security
Member	Thomas Woodham	Senior Engineering Manager, Secure
Member	Amar Patel	Engineering Manager, Secure:Static Analysis
Member	Zach Rice	Senior Backend Engineer, Secure:Static Analysis
Member	Lucas Charles	Staff Backend Engineer, Secure:Static Analysis

Direction

TBD