★ API Keys
Manage access tokens for automated deployments, webhooks, and third-party integrations.
| Key Name | Token | Scopes | Created | Last Used | Actions |
|---|---|---|---|---|---|
| Production Deploy Bot |
git_sk_prod_••••••••••••••4a9f
|
write:deploy read:repo | Oct 12, 2024 | 2 hours ago |
|
| CI/CD Pipeline (GitHub Actions) |
git_sk_ci_••••••••••••••8b2e
|
read:repo read:hooks | Sep 28, 2024 | 14 days ago |
|
🔐 Security Best Practices
- Never commit API keys to version control. Use environment variables or secret managers.
- Rotate keys every 90 days or immediately after a potential leak.
- Assign the minimum required scopes (principle of least privilege).
- Monitor "Last Used" dates and revoke dormant keys to reduce attack surface.