[latchkey]

Sure, but when does the russian doll end? Who implements the automation? How is it tested in CI? Who watches the automation to make sure it is working? Who fixes it when it is broken once a year. What happens if I get hit by a bus or leave the company?

If Github could just solve the issue with a PAT that solves my usecase, it seems like a far less brittle solution.

[chipsa]

If you have an automation to update it, why would you only run it once a year? why not once a week? then you'd know it's broken within a week.

[TechBro8615]

It doesn't end, that's why the number of developers is increasing indefinitely. The crazy thing is that it seems to work, as society has still yet to fall apart.

...or maybe society is falling apart and it's the fault of programmers. Maybe we're building an unstable web of automated abstractions supported by a decreasing number of specialists operating at the physical layers closer to reality. Maybe one day it will all collapse like the collaterized debt obligation market in 2007 and we'll be back to making websites with PHP and FTP.

[latchkey]

> we'll be back to making websites with PHP and FTP

It stopped?

[withinboredom]

I def missed that memo.

[rad_gruchalski]

> What happens if I get hit by a bus or leave the company?

What happens now if you get hit by a bus and the token you issued is leaked, and someone has to rotate it? I would assume you have that documented, tested, preferably automated?