Gitlab hero border pattern left svg Gitlab hero border pattern right svg

Secret Detection Priorities, 17.0-17.11

  1. You are here:
  2. GitLab Direction
  3. Product Stage Direction - Application Security Testing
  4. Secret Detection Priorities, 17.0-17.11

Secret Detection

   
Stage Application Security Testing
Content Last Reviewed 2024-11-19
Content Last Updated 2024-11-19

Overview

Secret Detection is a group in the Application Security Testing stage. To learn more about this group, please take a look at the direction Secret Detection page.

Purpose

This page is for high-level prioritization of the Secret Detection team for 17.0-17.11. It primarily includes feature/product items and is not a comprehensive list of everything that will be worked on such as bugs, implementation issues, documentation, or technical debt. It is not intended as a replacement or alternative for our issue boards. It is meant as an easily consumable single view of the main in-progress and upcoming work items for the Secret Detection group. It also allows mixing Epics and Issues in a single list. The tables come from the secret_detection.yml file. This list is not a guarantee of timing or order of delivery. Rather, use this as a guide to see the top items we are working on and will be in the near future. The list purposefully does not extend out beyond a year to minimize a false sense of priority.

Completed Work

  1. May, 2024 - Advanced vulnerability tracking for secret detection
  2. May, 2024 - Remote rulesets when overriding or disabling rules
  3. June, 2024 - Push protection (beta)
  4. July, 2024 - Expanded support of custom rules in pipeline secret detection
  5. July, 2024 - Push protection (self-managed)
  6. August, 2024 - Prevent project-level SAST/SD/IaC config files from interfering with policy-driven scans
  7. September, 2024 - Secret Detection support for Anthropic API keys
  8. October, 2024 - Push protection (generally available)

Priorities

Priority Name Target release
1 API to enable push protection for all projects in a group 17.7
2 Add explanations and references to Secret Detection rules and findings 17.7
3 Add push protection support for 10 more default rules 17.7
4 P99 Performance Testing of Secret Push Protection 17.7
5 Verify validity/liveness of GitLab Secrets 17.9
6 Diversify severity levels so not all findings are critical TBD
7 SD Partner Program Enhancements 17.10
8 Improve GitLab-maintained Secret Detection rulesets 17.10
9 Look for secrets in all commits in an MR TBD

*This page may contain information related to upcoming products, features and functionality.

It is important to note that the information presented is for informational purposes only, so please do not rely on the information for purchasing or planning purposes.

Just like with all projects, the items mentioned on the page are subject to change or delay, and the development, release, and timing of any products, features, or functionality remain at the sole discretion of GitLab Inc.*

Edit this page View source