GitHub's installation tokens grew from 40 to ~520 chars — check your validation regexes
DanWahlin · x · 2026-10-13
Main Branch issue #44 warns that GitHub App stateless installation tokens are now 520 characters (still ghs prefixed, same permissions/expiry). Things that can break: validation expecting exactly 40 chars, short DB columns or secret stores, proxies truncating long Authorization headers, and old-pattern redaction rules; remove the temporary X-GitHub-Stateless-S2S-Token header. Also: a fine-tuned model for leaked-secret detection reads surrounding code to catch formatless passwords, free for Secret Protection/Advanced Security customers; AI detection in push protection is in private preview.
More from coding & agent
- NVIDIA open-sources SMLIB, its NURBS-based CAD kernel, after 20-year partnership — Promptmethus · 2026-10-13
- Readme team launches Restless: self-improving APIs with live logs and agent recovery — testingcatalog · 2026-10-13
- LLMs are System 2: Austin LangChain's framing for pairing fast judgment with slow reasoning — colinmcnamara · 2026-10-13
- A feed of next actions is the only sane way to manage massively parallel agents — _AustinCalvert_ · 2026-10-13
- Grok agent's human-like 'ack' behavior impresses in hands-on test, still trails Claude Code for coding — doooyle · 2026-10-13
- chessmod lets you play rated chess bots inside Claude Code while it works — bushibuilds · 2026-10-13