Fine-grained permissions for job tokens is now GA
Aug 26, 2025Alex Mark

Summary
This post announces the General Availability of fine-grained permissions for CI/CD job tokens. It details the initial set of resources for which granular permissions can be applied (repositories, deployments, environments, jobs, packages, pipelines, releases, secure files, Terraform state) and explains the security benefits, including reducing attack surface, eliminating dependency on long-lived tokens, and preparing for machine-based identity. It also provides guidance for getting started by auditing critical pipelines and enabling the opt-in capability.