We ban the requests with the custom HTTP header, X-Gitlab-Event,
on the pipeline trigger endpoint, as this should never be an
acceptable situation.