@prefix skos: <http://www.w3.org/2004/02/skos/core#> .
@prefix dcterms: <http://purl.org/dc/terms/> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
@prefix foaf: <http://xmlns.com/foaf/0.1/> .
@prefix mcr: <https://registry.apicrafter.io/vocab#> .
@prefix dt: <https://registry.apicrafter.io/datatype/> .
@prefix cat: <https://registry.apicrafter.io/category/> .
@prefix country: <https://registry.apicrafter.io/country/> .
@prefix tool: <https://registry.apicrafter.io/tool/> .

dt:gitlab_cicd_job_token a skos:Concept ;
    skos:inScheme <https://registry.apicrafter.io/> ;
    skos:notation "gitlab_cicd_job_token" ;
    skos:prefLabel "GitLab CI/CD job token"@en ;
    skos:definition "Short-lived token that GitLab creates for each CI/CD job (CI_JOB_TOKEN) to call the API and fetch artifacts and packages during the job. GitLab gives these tokens the prefix glcbt-, which cannot be configured. GitLab does not document the length; the regexp follows the gitleaks rule (one to five letters or digits, an underscore and 20 characters)."@en ;
    skos:broader dt:access_token ;
    mcr:status "draft" ;
    mcr:isPII false ;
    mcr:classification "identifier" ;
    mcr:regexp "^glcbt-[A-Za-z0-9]{1,5}_[A-Za-z0-9_-]{20}$" ;
    rdfs:seeAlso <https://docs.gitlab.com/security/tokens/> ;
    rdfs:seeAlso <https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml> .