VladPolskiy/gitlab-foss
1
0
Fork 0
mirror of https://gitlab.com/gitlab-org/gitlab-foss.git synced 2025-07-21 23:43:41 +00:00
Code Issues Packages Projects Releases 1 Wiki Activity
Files
master
gitlab-foss/doc/development/compromised_password_detection.md
GitLab Bot 2b2746757e Add latest changes from gitlab-org/gitlab@master
2025-05-30 00:20:13 +00:00

1.5 KiB
Raw Permalink Blame History

stage, group, info, title
stage group info title
Software Supply Chain Security Authentication Any user with at least the Maintainer role can merge updates to this content. For details, see https://docs.gitlab.com/development/development_processes/#development-guidelines-review. Compromised password detection development

For information on this feature that are not development-specific, see the feature documentation.

CloudFlare

The CloudFlare leaked credentials detection feature can detect when a request contains compromised credentials, and passes information to the application in the Exposed-Credential-Check header through a managed transform.

GitLab team members can find the CloudFlare Terraform configuration in the GitLab.com infrastructure configuration management repository: https://ops.gitlab.net/gitlab-com/gl-infra/config-mgmt

Additional resources

The Authentication group owns the compromised password detection feature. GitLab team members can join their channel on Slack: #g_sscs_authentication.