Users and organizations can now verify GitHub Pages domains to protect against takeover attacks.
Learn more about verifying your custom domain for GitHub Pages
GitHub recently introduced the ability to set an expiration date when creating or regenerating a personal access token (PAT). For a PAT that is authorized to access an organization protected by SAML single sign-on (SSO), the expiration date of that PAT is now available via the GET /orgs/{org}/credential-authorizations
API.
Organization administrators can use the following gh
command to see the expiration dates of all PATs that are authorized to access their org by authenticating with a PAT that has the read:org
scope:
gh api --paginate /orgs/:org/credential-authorizations --jq='.[] | [.authorized_credential_expires_at]'
Learn more about authorizing a personal access token for use with SAML single sign-on.
Users and organizations can now verify GitHub Pages domains to protect against takeover attacks.
Learn more about verifying your custom domain for GitHub Pages