summaryrefslogtreecommitdiff
path: root/changelogs/unreleased/security-ci-job-token-has-access-to-private-files.yml
diff options
context:
space:
mode:
authorGitLab Bot <gitlab-bot@gitlab.com>2020-06-03 08:27:55 +0000
committerGitLab Bot <gitlab-bot@gitlab.com>2020-06-03 08:27:55 +0000
commite36433a15c78f372516e106a8e772bf47c8e9769 (patch)
tree50c090b3565fefe43b7e0e4e71d1c15084471ab9 /changelogs/unreleased/security-ci-job-token-has-access-to-private-files.yml
parent086a9faab8bd90f37f9f6be7f8f839a65d388cfa (diff)
downloadgitlab-ce-e36433a15c78f372516e106a8e772bf47c8e9769.tar.gz
Add latest changes from gitlab-org/security/gitlab@12-10-stable-ee
Diffstat (limited to 'changelogs/unreleased/security-ci-job-token-has-access-to-private-files.yml')
-rw-r--r--changelogs/unreleased/security-ci-job-token-has-access-to-private-files.yml5
1 files changed, 5 insertions, 0 deletions
diff --git a/changelogs/unreleased/security-ci-job-token-has-access-to-private-files.yml b/changelogs/unreleased/security-ci-job-token-has-access-to-private-files.yml
new file mode 100644
index 00000000000..b96480de3c5
--- /dev/null
+++ b/changelogs/unreleased/security-ci-job-token-has-access-to-private-files.yml
@@ -0,0 +1,5 @@
+---
+title: Prevent fetching repository code with unauthorized ci token
+merge_request:
+author:
+type: security