GitLab personal access token
ID gitlab_pat
DatatypeNot PIIidentifierDraft
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
Personal access token of GitLab, which authenticates a user to the GitLab API and to Git over HTTPS. GitLab gives these tokens the prefix glpat-. The classic form has 20 more characters; the newer routable form is longer and ends with a dot and a nine-character suffix. Examples are left out because GitHub push protection rejects token-shaped values, even constructed ones.
- Parent datatype
- Access token
access_token - Categories
- Secrets and credentials (passwords, keys, tokens)
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- Quality
- 70/100 · missing: examples, mapping (Wikidata, Schema.org, ...), translation
- Metacrafter rules
- no detection rule yet
- Supported by tools
- detect-secrets, Gitleaks, Nightfall AI, Semgrep, TruffleHog
Regular expression
^glpat-(?:[A-Za-z0-9_-]{20}|[A-Za-z0-9_-]{27,300}\.[0-9a-z]{2}[0-9a-z]{7})$Python re syntax.
Examples
| Value | Description |
|---|---|
| glpat-ExampleToken invalid | Too short |
Sources
- doc: https://docs.gitlab.com/security/tokens/
- other: https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml
Use this record
- Page URL:
http://registry.apicrafter.io/datatype/gitlab_pat - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/secrets/gitlab_pat.yamlon GitHub