Expired60% confidenceFactExact time
The GitHub Copilot agent obtains repository access through GitHub Apps' OAuth mechanism, interacts with the API using an Installation Access Token, and the token has a default validity period of 1 hour.
2
Sources
60%
Confidence
Medium-term (~90 days)
Relevance
7/9/2026
First Seen
Valid until: 10/7/2026(expired)
Sources
Related Claims
VerifiedPlatforms such as GitHub Actions and GitLab CI grant runners write access to repositories by default through built-in credentials such as GITHUB_TOKEN.72% similarUnverifiedGitHub Apps delegate permissions on a per-installation basis, which can be precisely limited to specific repositories and operation types, and are decoupled from user identity through independent Installation Access Tokens72% similarUnverifiedGITHUB_TOKEN is a temporary identity token automatically generated by GitHub Actions for each workflow run, scoped to the current repository and automatically invalidated after the job ends.70% similarVerifiedGitHub provides free Actions runtime for public repositories, with 2,000 minutes per month.70% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/354125API
curl https://kongchang.com/api/v1/knowledge/claims/354125MCP
get_claim(id=354125)