Summary
Organisations can now revoke or deauthorise credentials by token type and user, covering personal access tokens, SSH keys, OAuth app tokens, and GitHub App user tokens. The update adds organisation-level UI and API parity together with audit-log and email notifications.
Why it matters
Faster, more targeted revocation reduces the blast radius and recovery time after developer-account compromise.
Related coverage
- GitHub adds organisation-level Code Quality trends
- GitHub brings enterprise-managed Copilot settings to JetBrains
- Gutenberg 23.8 adds shareable revisions and faster List View