FAQ | This is a LIVE service | Changelog

Skip to content

fix(common-pipeline): pin secret detector image version

GitLab's secret detector has started generating two spurious Critial severity leak detections due to scanning the .git directory of the cloned project which, as part of the clone process, contains the temporary GitLab CI token.

In the upstream issue, customers are being advised to pin the version to 7.9.0 to work around the issue.

Issue #136 (closed) has been opened to track removal of this workaround.

Closes #135 (closed)

Edited by Dr Rich Wareham

Merge request reports

Loading