Source control

GitLab CLI Authentication

GitLab CLI configuration can store access tokens for GitLab.com and self-managed GitLab hosts.

Metadata

id: source-control.gitlab-cli-auth
category: source-control
sensitivity: critical
subcategory: gitlab-cli
artifact types: credential, token, configuration
tags: gitlab, source-control

Path Matchers

Path	Kind	Platforms
`%LOCALAPPDATA%\glab-cli\config.yml`	`file`	`windows`
`$HOME/.config/glab-cli/config.yml`	`file`	`linux`, `macos`
`$HOME/Library/Application Support/glab-cli/config.yml`	`file`	`macos`
`**/.git/glab-cli/config.yml`	`glob`	`windows`, `linux`, `macos`

Content Indicators

Literal strings:

token
host

Credential Types

access-token

Impact

credential_access
source_code_access

References

GitHub CLI Authentication

GitHub CLI host configuration can identify authenticated GitHub hosts and may contain plaintext OAuth tokens when secure credential storage is unavailable.

SSH Authorized Keys

SSH authorized_keys files list public keys allowed to access an account.

On this page

Metadata Path Matchers Content Indicators Credential Types Impact References