Project and User Grouping
Fine-grained permissions for job tokens is now GA

Fine-grained permissions for job tokens is now GA

8/26/2025 · Alex Mark

What this post added

This post announces the General Availability of fine-grained permissions for CI/CD job tokens. It details the initial set of resources for which granular permissions can be applied (repositories, deployments, environments, jobs, packages, pipelines, releases, secure files, Terraform state) and explains the security benefits, including reducing attack surface, eliminating dependency on long-lived tokens, and preparing for machine-based identity. It also provides guidance for getting started by auditing critical pipelines and enabling the opt-in capability.

Read the original post ↗