99% of repository access tokens never expire

T2Covered by 1 source · first reported by Help Net Security at 06 Nov, 05:30 UTC

Developers, automated tools and AI coding agents hold permissions that can outlast the work they were granted for. Without access reviews, organizations can leave accounts able to copy or change company code after the work ends, according to BlueFlag Security’s The State of Developer Risk 2026…