# github PAT

Published articles for github PAT.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Chainguard's Trail of Bits security assessment

DevFeed: [Chainguard's Trail of Bits security assessment](<https://devfeed.tech/articles/chainguard-s-trail-of-bits-security-assessment-12997.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/chainguards-trail-of-bits-security-assessment>)

Published: 2024-05-14T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [GitHub Actions](<https://devfeed.tech/topics/github-actions.md>), [Code review](<https://devfeed.tech/topics/code-review.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [Monitoring](<https://devfeed.tech/topics/monitoring.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [code-review](<https://devfeed.tech/tags/code-review.md>), [github-actions](<https://devfeed.tech/tags/github-actions.md>), [github-credentials](<https://devfeed.tech/tags/github-credentials.md>), [github-pat](<https://devfeed.tech/tags/github-pat.md>), [least-privilege](<https://devfeed.tech/tags/least-privilege.md>), [monitoring](<https://devfeed.tech/tags/monitoring.md>), [octo-sts](<https://devfeed.tech/tags/octo-sts.md>), [security](<https://devfeed.tech/tags/security.md>), [software-security-audit](<https://devfeed.tech/tags/software-security-audit.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>)

### AI overview

Chainguard describes an independent Trail of Bits security assessment of its production environment and supply-chain defenses. The assessment found no critical issues, but identified command injection in a GitHub Action and insufficient redaction of sensitive CloudEvents; Chainguard reports that both issues were fixed. The article also outlines security improvements involving GitHub credentials, GitHub Actions monitoring, FIDO security keys, anomaly monitoring, and production-network alerts.

### Source excerpt

Trust but verify: Read about Chainguard's independent security assessment by Trail of Bits and our dedication to transparency in security practices.

## Replacing Long-Lived GitHub Personal Access Tokens with Short-Lived Credentials Using Octo STS

DevFeed: [Replacing Long-Lived GitHub Personal Access Tokens with Short-Lived Credentials Using Octo STS](<https://devfeed.tech/articles/the-end-of-github-pats-you-can-t-leak-what-you-don-t-have-13250.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/the-end-of-github-pats-you-cant-leak-what-you-dont-have>)

Published: 2024-04-11T00:00:00Z

Content type: tutorial

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [GitHub](<https://devfeed.tech/topics/github.md>), [Security](<https://devfeed.tech/topics/security.md>), [octo sts](<https://devfeed.tech/topics/octo-sts.md>), [GitHub Actions](<https://devfeed.tech/topics/github-actions.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>)

Tags: [ephemerality](<https://devfeed.tech/tags/ephemerality.md>), [github](<https://devfeed.tech/tags/github.md>), [github-actions](<https://devfeed.tech/tags/github-actions.md>), [github-credentials](<https://devfeed.tech/tags/github-credentials.md>), [github-pat](<https://devfeed.tech/tags/github-pat.md>), [github-personal-access-token](<https://devfeed.tech/tags/github-personal-access-token.md>), [least-privilege](<https://devfeed.tech/tags/least-privilege.md>), [minimalism](<https://devfeed.tech/tags/minimalism.md>), [octo-sts](<https://devfeed.tech/tags/octo-sts.md>), [personal-access-token](<https://devfeed.tech/tags/personal-access-token.md>), [principle-of-ephemerality](<https://devfeed.tech/tags/principle-of-ephemerality.md>), [pull-requests](<https://devfeed.tech/tags/pull-requests.md>), [rotation](<https://devfeed.tech/tags/rotation.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [security](<https://devfeed.tech/tags/security.md>), [security-token-service](<https://devfeed.tech/tags/security-token-service.md>)

### AI overview

This article explains how Chainguard replaced long-lived GitHub Personal Access Tokens and other credentials with short-lived credentials across several GitHub organizations. It introduces Octo STS as a Security Token Service for GitHub credentials and describes the automation use cases that built-in GitHub Actions tokens could not support.

### Source excerpt

Ditch GitHub PATs for better security. Learn how to replace long-lived tokens and reduce your risk of leaked credentials.