GitLab API_TOKEN CI variable exposed to jobs that don't require it
Detects the sensitive project-wide CI/CD variable API_TOKEN being exposed to job scopes other than the gitlab-triage automation job that is its only intended consumer, expanding the blast radius of the credential.
Microsoft Sentinel (KQL)
