Represents a CI/CD variable defined at the instance scope. Instance variables are injected into all pipeline jobs across all projects on the GitLab instance (subject to protection settings). They are often used for global credentials, deployment keys, or shared configuration.
If the variable's value is found to be a valid GitLab personal access token (verified via API call during enrichment), a GL_IsToken edge is added directly to the corresponding GL_AccessToken node.
| Property Name | Data Type | Description |
|---|---|---|
| name | string | Variable key name (e.g., AWS_ACCESS_KEY_ID) |
| value | string | Variable value (empty string if masked=true and the value was hidden) |
| type | string | Variable type: env_var or file |
| protected | bool | Whether the variable is only injected into protected branch/tag pipelines |
| masked | bool | Whether the variable value is masked in job logs |
| description | string | Optional description of the variable's purpose |
flowchart TD
GL_Instance[fa:fa-building GL_Instance]
GL_InstanceVariable[fa:fa-sliders GL_InstanceVariable]
GL_AccessToken[fa:fa-key GL_AccessToken]
GL_Instance -->|GL_Defines| GL_InstanceVariable
GL_InstanceVariable -->|GL_IsToken| GL_AccessToken