{"version":"2.1.232","anchor":"gitlab-tokens-are-now-stripped-from-logs-and-error-output","canonical_anchor":"gitlab-tokens-are-now-stripped-from-logs-and-error-output","heading":"GitLab tokens are now stripped from logs and error output","tier":"notice","area":"Secret Redaction","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.232\/e\/gitlab-tokens-are-now-stripped-from-logs-and-error-output","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.232","markdown":"### GitLab tokens are now stripped from logs and error output\n\nGitLab tokens are now masked in logs, and GitHub token matching covers one more prefix.\n\n**What**\n\nThe scrubber that replaces secrets with `<token>` before anything is logged or reported now recognises GitLab tokens, and its GitHub rule was widened to catch one more prefix letter (`gh[psour]_`, previously `gh[psou]_`).\n\n**Details**\n\n- Covers the glpat, gldt, glrt, glft, glsoat, gloas, glagent, glptt, glcbt, glimt and glffct prefixes, with or without the trailing 9-character checksum.\n- Applies everywhere the sanitiser runs, so pasted GitLab tokens in error text are redacted for everyone.\n\n**Evidence**\n\n`\/gl(?:pat|dt|rt|ft|soat|oas|agent|ptt|cbt|imt|ffct)-[A-Za-z0-9_=-]+(?:\\.[0-9a-z]{9})?\/g`\n\n- Area: Secret Redaction\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 1\/5"}