---
title: "Discussion on \"Killing the long-lived tokens in my CI, one exchange at a time\" | Hashnode"
description: "Discussion on \"Killing the long-lived tokens in my CI, one exchange at a time\". A static API token stored in GitHub Secrets is a breach that has not happened yet. The timer is already running. You do not know how long the fuse is, because a long-lived token's fuse is however long"
url: "https://hashnode.com/posts/killing-the-long-lived-tokens-in-my-ci-one-exchange-at-a-time/6a6ffc46a6b81fb92db66930"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Killing the long-lived tokens in my CI, one exchange at a time](https://lionshead-notes.hashnode.dev/killing-the-long-lived-tokens-in-my-ci-one-exchange-at-a-time?utm_source=hashnode&utm_medium=feed)

A static API token stored in GitHub Secrets is a breach that has not happened yet. The timer is already running. You do not know how long the fuse is, because a long-lived token's fuse is however long

Aug 3 · 9 min read · lionshead-notes.hashnode.dev  
Read the article

-   [#security](https://hashnode.com/tag/security)
-   [#devops](https://hashnode.com/tag/devops)
-   [#cicd](https://hashnode.com/tag/cicd)
-   [#oidc](https://hashnode.com/tag/oidc)

## Written by

[Allen Brooks](https://hashnode.com/@earnestamateur)

@earnestamateur · Greenville, SC, US

  
[View profile](https://hashnode.com/@earnestamateur)

15 years building software, most of it learned by watching it get built badly. Now building platforms solo (heavy Claude Code) at Lionshead.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.