In all versions of GitLab CE/EE since version 8.9, project exports may expose trigger tokens configured on that project.
gitlab gitlab
gitlab gitlab 4.3.0