non-human identities

99% of repository access tokens never expire

Developers, automated tools and AI coding agents hold permissions that can outlast the work they were granted for. Without access reviews, organizations…