software · DiggingBeagle record
GitHub CLI
Developer automation CLI with optional expiring refreshable OAuth credentials.
- Entity kind
- software
Record description
GitHub CLI is the gh client for authentication and developer automation. In v2.103.0 GitHub introduced optional short-lived access tokens and refresh-token rotation; existing sessions and manual token workflows remain unaffected unless reconfigured. Since coding agents can read CLI credential stores, access-token expiry and refresh-token custody are separate security boundaries.
The optional expiring-token workflow introduced in gh 2.103.0 rotates OAuth credentials and expires access tokens on a substantially shorter timeline. It does not retroactively shorten manually configured classic tokens, and an obtained refresh token can still be valuable. The separate package-registration allegation concerns reading a local existing CLI token.