Skip to content

Add telemetry for client-side secret detection

Dheeraj Joshi requested to merge djadmin-client-side-sd-telemetry into master

Related issue: #472015 (closed);

What does this MR do and why?

This MR adds internal event tracking for client-side secret detection. The purpose is to track the number of times the warning has been shown, which is the number of times a secret has been detected.

Additionally, it captures

  1. the content type (i.e description / comment)
  2. the type of secret detected
    • it only captures the first one, when multiple secrets are detected
  3. whether the warning was a false positive (risk was accepted) or dismissed (to verify & remove the secrets from content)

Todo: Add more test coverage

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

2024-07-30_10.11.53

Variants:

When a warning was dismissed When a warning was accepted
image image

How to set up and validate locally

  1. Visit a project's issue or MR
  2. Add this content in the comment / description: glpat-12345678901234567890
  3. Accept / Dismisse the warning
  4. The track event should be triggered
Edited by Dheeraj Joshi

Merge request reports

Loading