Use a fine-grained token for better security — limit access to Push repos only with Contents and Pages permissions. For apps using GitHub Actions (e.g. Cloudflare Workers), also enable the workflow scope. GitHub token settings ↗
🔒 If you lose your device, revoke your token immediately at github.com/settings/tokens