Github — Hard
Key points
- Installation tokens have a limited validity period
- They are generated using a private key and JWT
- Scopes are limited to specific repositories and permissions
- User PATs are long-lived and require rotation
Ready to go further?
Related questions