In all versions of GitLab CE/EE since version 8.9, project exports may expose trigger tokens configured on that project.