99% of repository access tokens never expire, according to a developer risk report
RESEARCHBlueFlag Securityredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
A new report says that almost all access tokens used to reach software code never expire. Developers, automated tools and AI coding helpers can keep the ability to copy or change company code after their work has ended.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Review whether developer, contractor, service account and AI coding agent access to code repositories is still needed.
- Check for repository access tokens that never expire and consider setting expiry dates on them.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Help Net Security
Who and what is in it
Companies