Security & supply chainGitLab Secrets Manager hits GA in 19.5 and scopes credentials to the job
GitLab Secrets Manager is generally available in GitLab 19.5 for Premium and Ultimate. Built on OpenBao, it hands a credential only to jobs that declare it and match its branch and environment scope, and every CI/CD read is logged with its pipeline and job ID.