CuraDevOps

tag: Github-Cli · 2 items

Learn GitHub CLI: opt-in expiring OAuth tokens now in public preview
2026-10-22 · GitHub Changelog · source ↗ #github-cli#oauth#security
  • Platform/SRE — Learn: Pre-GA preview of short-lived, auto-refreshing OAuth tokens in gh CLI; worth tracking if your teams use GitHub CLI for scripted infra workflows, but no action warranted until GA.
  • CI/CD — Learn: Expiring tokens would improve credential hygiene for pipelines that invoke gh CLI, but this is public preview — evaluate once it reaches GA before updating pipeline auth patterns.
  • Leader — Skip
Act archived GitHub CLI Linux package signing key expires September 5
2026-09-04 · GitHub Changelog · source ↗ #github-cli#package-signing#linux
  • Platform/SRE — Act: The PGP signing key for GitHub CLI APT/RPM repos expires 2026-09-05; any managed Linux host that auto-installs or updates gh via apt/rpm will fail package-signature verification on the first release after that date. Update the trusted keyring on those hosts today.
  • CI/CD — Act: Pipelines that install gh on Linux runners via apt or rpm will break signature verification starting with the first release after 2026-09-05; update the keyring import step in CI configs, runner setup scripts, or Dockerfiles immediately to add the new PGP key before pipelines go red.
  • Leader — Skip