A leaked personal access token shouldn't expose every project its owner can reach. Fine-grained PATs scope each token’s permissions to the job.

Explore tokens that carry only the permissions they need, and nothing more. Then join the beta program.

Raccontata daabout.gitlab.com