GitLab Secrets Manager reaches GA in 19.5

GitLab made Secrets Manager generally available in version 19.5 for Premium and Ultimate on GitLab.com and Self-Managed. The store runs on OpenBao, encrypts values with AES-256-GCM and injects secrets only into jobs that declare them via the secrets: keyword in .gitlab-ci.yml. It is a paid add-on billed in GitLab Credits: one per secret per month and one per 2,500 reads.

• Store built on OpenBao with AES-256-GCM encryption
• Only jobs declaring secrets: and matching scope get values
• Billing: 1 credit per secret per month and per 2,500 reads
• No migration tooling for CI/CD variables yet