Secret Detection Runbooks

Overview

This page lists runbooks used by the Secret Detection team for monitoring, mitigating and responding to an incident.

Runbooks


Pre-receive secret detection monitoring
NOTE: This is still an early draft, more information will be added as the dashboard is created soon. When to use this runbook? This runbook is intended to be used when monitoring the pre-receive secret detection feature to identify and mitigate any reliability issues or performance regressions that may occur when it is enabled on Gitlab.com. The runbook can also be used to understand more about relevant dashboards and how to improve them:
Pre-receive secret detection performance testing
When to use this runbook? Use this runbook for: Running GPT tests - for running tests and comparing with previous benchmarks Deploying a new version of GitLab to GET - for updating a GET instance, most likely to test out changes related to pre-receive secret detection Setting up a new GET environment - for testing different reference architectures Prerequisites gcloud (official instructions) - for running various commands, and for logging in to the test runner vm The Static Analysis GCP Project (see Resources section) - access required to make changes to the infrastructure Running GPT tests Manual testing Get the url and password for the root user from 1password by searching for Static Analysis in the Engineering Vault.