Unauthenticated public GitLab CI artifact download

Arnold Chan@slaz

•updated Sep 10, 2026•0•0•2

Detects unauthenticated GET requests to GitLab CI/CD job artifact download endpoints on a public repository, which can expose leaked secrets bundled into build artifacts.