@nirik and I were separately reached out to separately by the Red Hat Security team regarding this. The GitLab runner tokens come as a part of the HTTP API response from GitLab and hence, can be considered harmless. Thanks to @ryanlerch's example of .gitleaks.toml file in the Tiny Stage repository that was helpful to create something similar for this repository.
@nirik and I were separately reached out to separately by the Red Hat Security team regarding this. The GitLab runner tokens come as a part of the HTTP API response from GitLab and hence, can be considered harmless. Thanks to @ryanlerch's example of
.gitleaks.toml
file in the Tiny Stage repository that was helpful to create something similar for this repository.