Migrate from pipeline variables to pipeline inputs for better security

Pipeline variables have long been a convenient way to customize GitLab CI/CD pipelines at runtime. However, as CI/CD security best practices have evolved, we've recognized the need for stronger controls around pipeline customization. Unrestricted pipeline variables allow any users with pipeline trigger permissions to override values without validation or type checking. Beyond security considerations, pipeline variables lack proper documentation and explicit declaration, making it difficult to un...

Submit