GitHub has implemented support for a new type of access tokens that can selectively define the permissions of a specific developer or script, covering only the tasks necessary for completing the work. It is expected that selective access provision will help reduce the risk of attacks in the event of credential compromise. Tokens can be used in scripts to manage selective access to the GitHub API and when connecting via HTTPS. Additionally, administrators are provided with options to review and revoke tokens, as well as set auditing policies and token confirmations.
Previously, a participant could create individual tokens that provided access to all their repositories and organizations, but with the new tokens, project owners can detail access, for example, allowing read-only access or granting selective access to specific repositories. A token can be associated with over 50 permissions covering various operations with organizations, issues, repositories, and users. There is also the option to limit the token's expiration time.
Source: opennet.ru
