Gitlab CI job script dumps environment variables to temp file via 'env >'

Arnold Chan@slaz

•updated Sep 10, 2026•0•0•0

Detects CI/CD job activity referencing shell commands that redirect the entire environment to a file (e.g. 'env > out.tmp'), the exact pattern that caused a GitLab CI job in the openconnect/ocserv project to dump secrets into a public build artifact, leaking a high-privilege personal access token with Owner access to GnuTLS and 55 other critical projects.