A leaked personal access token shouldn't expose every project its owner can reach. Fine-grained PATs scope each token’s permissions to the job.
…Today’s coverage and future roadmap We advise against using fine-grained PATs in production workloads until general availability. Fine-grained PATs currently cover about 75% of REST API endpoints . In the…