AIWHYS

Products

GitHub CLI

2 synchronized stories carry this tag.

ReliabilityPreview

GitHub CLI previews expiring OAuth credentials

GitHub CLI added an opt-in public preview for expiring OAuth access tokens with rotating refresh tokens. The CLI refreshes credentials automatically, reducing the lifetime of a leaked access token while preserving interactive authentication across developer and agent workflows.

Why it matters: Long-lived CLI credentials are a high-value target in terminals, automation and coding-agent environments; shorter access-token lifetime can reduce exposure if refresh-token storage, revocation and failure behavior are also sound.

Read storyOriginal source · github.blog
ReliabilityPreview

GitHub Actions lockfiles pin workflow dependencies to reviewed commits

GitHub opened workflow dependency lockfiles to public preview. Workflows can keep readable tags or branches while execution uses locked commits for actions, transitive dependencies and reusable workflows; administrators can require lockfiles and Dependabot can update them.

Why it matters: A moved tag can silently change code with repository or cloud credentials. The preview makes the executed workflow dependency graph reviewable and reproducible without forcing opaque commit SHAs into every YAML reference.

Read storyOriginal source · github.blog