Exposed GitLab project email addresses let attackers push code

Private GitLab email addresses used to submit work items to projects have been exposed in READMEs, guides, and support pages. The addresses contain a long-lived project access token, and disclosure may allow an unauthorized party to create issues or merge requests as the token owner.