Storing information on gitLab?

Question

GitLab

How safe is it to host private projects on gitlab? There is a task to rewrite leftist projects, and there at every step there are tokens, passwords, requests through api. But somewhere you want to store it and at the same time safely. Maybe there is a safer solution?

Answer 1

Hashicorp vault

Answer 2

I think it's safer in every way than maintaining your own infrastructure and taking care of protection from attacks. Well, remove sensitive data to special storages, as Andrey Gavrilov advised .
Remove all passwords and tokens, at least in environment variables. And it's better to get them on request in the secret store.