Security

Personal Access Token (PAT)

A string credential that authenticates to GitHub's API and git operations on behalf of a user account, often with broad and long-lived permissions. A stolen PAT gives an attacker the same access as the user.

Deep dive

Learn Article

Why Short-Lived Credentials Beat Rotating Secrets After a CI Breach

Rotation cleans up each leak; short-lived identity-based credentials make leaks cheap. OIDC, approval gates and egress control shrink what a stolen workflow can take.

intermediate 4 min read

Back to glossary