GitLab CI/CD job token
ID gitlab_cicd_job_token
DatatypeNot PIIidentifierDraft
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
Short-lived token that GitLab creates for each CI/CD job (CI_JOB_TOKEN) to call the API and fetch artifacts and packages during the job. GitLab gives these tokens the prefix glcbt-, which cannot be configured. GitLab does not document the length; the regexp follows the gitleaks rule (one to five letters or digits, an underscore and 20 characters).
- Parent datatype
- Access token
access_token - Categories
- Secrets and credentials (passwords, keys, tokens)
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- Quality
- 70/100 · missing: examples, mapping (Wikidata, Schema.org, ...), translation
- Metacrafter rules
- no detection rule yet
- Supported by tools
- GitGuardian, GitHub secret scanning, Gitleaks
Regular expression
^glcbt-[A-Za-z0-9]{1,5}_[A-Za-z0-9_-]{20}$Python re syntax.
Examples
| Value | Description |
|---|---|
| glcbt- invalid | Prefix without the token |
Sources
- doc: https://docs.gitlab.com/security/tokens/
- other: https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml
Use this record
- Page URL:
https://registry.apicrafter.io/datatype/gitlab_cicd_job_token - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/secrets/gitlab_cicd_job_token.yamlon GitHub