@prefix skos: <http://www.w3.org/2004/02/skos/core#> .
@prefix dcterms: <http://purl.org/dc/terms/> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
@prefix foaf: <http://xmlns.com/foaf/0.1/> .
@prefix mcr: <https://registry.apicrafter.io/vocab#> .
@prefix dt: <https://registry.apicrafter.io/datatype/> .
@prefix cat: <https://registry.apicrafter.io/category/> .
@prefix country: <https://registry.apicrafter.io/country/> .
@prefix tool: <https://registry.apicrafter.io/tool/> .

dt:gitlab_runner_token a skos:Concept ;
    skos:inScheme <https://registry.apicrafter.io/> ;
    skos:notation "gitlab_runner_token" ;
    skos:prefLabel "GitLab runner authentication token"@en ;
    skos:definition "Token with which a GitLab Runner authenticates to a GitLab instance to pick up CI/CD jobs. GitLab gives these tokens the prefix glrt- (glrtr- for runners created with a registration token), which cannot be configured. GitLab does not document the length; the regexp follows the gitleaks rule (20 characters after the prefix, or the longer routable form t<digit>_... ending with a dot and a nine-character suffix)."@en ;
    skos:broader dt:access_token ;
    mcr:status "draft" ;
    mcr:isPII false ;
    mcr:classification "identifier" ;
    mcr:regexp "^glrtr?-(?:[A-Za-z0-9_-]{20}|t[0-9]_[A-Za-z0-9_-]{27,300}\\.[0-9a-z]{9})$" ;
    rdfs:seeAlso <https://docs.gitlab.com/security/tokens/> ;
    rdfs:seeAlso <https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml> .
