Post #3752839
2026-07-11 15:34 UTC
I tried to create a github fine-grained access token to fetch things from github packages, and after staring at the page for 10 minutes, I gave up. Took 5 seconds to make a “classic” token. I don’t know who the fine-grained ones are for, but uhh… it wasn’t me
Replies (3)
-
@corry@infosec.exchange 2026-07-12 03:33
@whack@hachyderm.io GitHub loves nothing more than several half baked systems that don’t interact in any healthy way. Especially when it comes to security
-
@becomingwisest@hachyderm.io 2026-07-11 15:50
@whack@hachyderm.io I’d love a way to convert a token with lots of access down. You use it, and find out which perms it used, then lock it to those.
-
@JoeJulian@fosstodon.org 2026-07-12 16:07
@whack@hachyderm.io was just talking about this with a colleague. We're all doing it. It's the UX. Even AI doesn't know how to configure fine-grained tokens.