Hacker News new | ask | show | jobs
by stuff4ben 735 days ago
Good idea to rotate your tokens on a regular basis, but in this case, go ahead and do it now (if you use this tool and plugin)
1 comments

better even, don’t use never-expiring tokens/credentials that need rotation.
Expiration is still a form of rotation. Also, GitHub doesn't provide never-expiring tokens, all of their tokens have expiration policies and need regular rotation. That doesn't mean that there aren't good reasons (such as in this case vulnerable applications) to manually rotate even before the expiration date.
IIRC, GH classic tokens can never expire.