Automatically revoke exposed team tokens

When GitHub secret scanning reports a valid team API access token in a public repository, Account Chief now revokes it and emails the team’s members. Create a replacement token before reconnecting any affected integration.

See the API token guide for rotation and revocation guidance.