
8/26/2025 · Alex Mark
What this post added
This post announces the General Availability of fine-grained permissions for CI/CD job tokens. It details the initial set of resources for which granular permissions can be applied (repositories, deployments, environments, jobs, packages, pipelines, releases, secure files, Terraform state) and explains the security benefits, including reducing attack surface, eliminating dependency on long-lived tokens, and preparing for machine-based identity. It also provides guidance for getting started by auditing critical pipelines and enabling the opt-in capability.