Security · 2h ago
GitHub adds one-click credential revocation for leaked tokens
GitHub Enterprise users can now revoke all credentials—PATs, SSH keys, OAuth tokens, and SSO authorizations—in a single action from a new Settings page. The feature, announced June 24, replaces a manual scavenger hunt across multiple menus. It complements an existing admin-level bulk-revoke capability, aiming to cut containment time from hours to minutes.
Meridian48 take
The feature is a pragmatic fix for a common incident-response pain point, but its destructiveness means teams must inventory dependencies and plan recovery before relying on it.
Read the full reporting
GitHub ships a one-click self-revoke for users whose credentials just leaked →
DEV Community
githubcredential-revocation