4 ms·
better even, don’t use never-expiring tokens/credentials that need rotation.
by thund 2y ago
better even, don’t use never-expiring tokens/credentials that need rotation.
- WorldMaker 2y agoExpiration is still a form of rotation. Also, GitHub doesn't provide never-expiring tokens, all of their tokens have expiration policies and need regular rotation. That doesn't mean that there aren't good reasons (such as in this case vulnerable applications) to manually rotate even before the expiration date.
- paulryanrogers 2y agoIIRC, GH classic tokens can never expire.