4 ms·
That's multiple plain text passwords, one for each use, with the ability to see when they have been last used and individually revoke them.
by ithkuil 7y ago
That's multiple plain text passwords, one for each use, with the ability to see when they have been last used and individually revoke them.
- oefrha 7y agoAnd more importantly, scopes, so that one token for posting gists can’t delete all your repos.
- Latty 7y agoUnfortunately not, GitHub tokens are (outside of GitHub actions generated tokens) scoped for your entire account, which sucks. It should be an advantage though.
- deleted 7y ago[deleted]
- oefrha 7y agoWhat are you talking about? Personal access tokens are scoped.
- ithkuil 7y agoI had the same reaction then I re-read the comment and realized it was correct. The granularity of Personal access tokens scopes is focused on what kind of actions you can perform on which kind of objects, but you cannot limit it to one single repository or to one single organization you belong.