Cross-project pushes using CI/CD job tokens

In previous versions of GitLab, you could only use a CI/CD job token (CI_JOB_TOKEN) to push to the same repository where the pipeline runs. Cross-project pushes required a personal access token or deploy token.

You can now use a job token to push to another project when:

1. The target project opts in.
2. The user who starts the pipeline has at least the Developer role in the target project.

This feature is behind the allow_push_to_allowlisted_projects feature flag, disabled by default in GitLab 19.0. Ask your administrator to enable it.