{"version":"2.1.232","anchor":"gitlab-token-detection-grows-from-2-patterns-to-11","canonical_anchor":"gitlab-token-detection-grows-from-2-patterns-to-11","heading":"GitLab token detection grows from 2 patterns to 11","tier":"notice","area":"Secret Redaction","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.232\/e\/gitlab-token-detection-grows-from-2-patterns-to-11","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.232","markdown":"### GitLab token detection grows from 2 patterns to 11\n\nNine more GitLab token types are now redacted, and the older patterns catch modern longer tokens.\n\n**What**\n\nSecret redaction now recognises nine more GitLab credential types, and the two existing rules were rewritten to accept longer tokens. Previously only exactly-20-character `glpat-` and deploy tokens matched; the shared pattern now accepts 20 or more characters plus an optional 9-character checksum suffix, so current GitLab tokens are caught.\n\n**Details**\n\n- New detectors: runner authentication (`glrt-`), OAuth app secret (`gloas-`), pipeline trigger (`glptt-`), Kubernetes agent (`glagent-`), incoming mail (`glimt-`), SCIM OAuth (`glsoat-`), CI build (`glcbt-`), feed (`glft-`) and feature flag client (`glffct-`) tokens.\n- All eleven are marked high confidence, and the list is built unconditionally at startup, so this is live for everyone on this build.\n- The name prettifier learned `ci: \"CI\"` and `scim: \"SCIM\"` so rule names render correctly.\n\n**Evidence**\n\n`gitlab-scim-oauth-token`, `[\\\\w=-]{20,}(?:\\\\.[0-9a-z]{9})?`\n\n- Area: Secret Redaction\n- Tier: You'll notice\n- Useful: 4\/5\n- Signal: 2\/5"}