Add prefix to `db_key_base`
What does this MR do and why?
Related to #448792
This MR adds a prefix to db_key_base
to make it easier to detect by scanners when it leaks in job logs or anything else.
MR acceptance checklist
Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Screenshots or screen recordings
N/A
How to set up and validate locally
- Before starting anything, observe that your
db_key_base
inconfig/secrets.yml
does not have a prefix - Start the GDK
- Observe that the
db_key_base
now has a prefix - Access encrypted data (CI/CD variables for example) and observe that it still works even if the key changed in the file
Edited by Dominic Couture