From b27eeb5198d9c9eb2b345012bef5a01b3b1d8e8c Mon Sep 17 00:00:00 2001 From: Serena Fang <sfang@gitlab.com> Date: Tue, 11 Mar 2025 18:49:40 -0500 Subject: [PATCH] SPP docs diff scan web requests feature flag Changelog: changed --- .../secret_detection/secret_push_protection/_index.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/doc/user/application_security/secret_detection/secret_push_protection/_index.md b/doc/user/application_security/secret_detection/secret_push_protection/_index.md index 09b22b30af4f4..f69b45b0cb518 100644 --- a/doc/user/application_security/secret_detection/secret_push_protection/_index.md +++ b/doc/user/application_security/secret_detection/secret_push_protection/_index.md @@ -139,6 +139,7 @@ Secret push protection does not check a file in a commit when: - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/469161) in GitLab 17.5 [with a flag](../../../../administration/feature_flags.md) named `spp_scan_diffs`. Disabled by default. - [Enabled on GitLab.com](https://gitlab.com/gitlab-org/gitlab/-/issues/480092) in GitLab 17.6. +- [Added](https://gitlab.com/gitlab-org/gitlab/-/issues/491282) support for Web IDE pushes in GitLab 17.10 [with a flag](../../../../administration/feature_flags.md) named `secret_checks_for_web_requests`. Disabled by default. {{< /history >}} @@ -154,9 +155,8 @@ cause a [push to be blocked unexpectedly](#push-blocked-unexpectedly) even thoug contain a secret. To instead have only the changes (diff) scanned for secrets when pushing by using the Git CLI client, enable diff scanning. -Changes committed by using the Web IDE still result in the entire file being scanned due to a -technical limitation. Support for improvements is proposed in -[issue 491282](https://gitlab.com/gitlab-org/gitlab/-/issues/491282). +To enable diff-only scanning for Web IDE pushes, enable the `secret_checks_for_web_requests` +and `spp_scan_diffs` feature flags. ## Resolve a blocked push -- GitLab