Notes from the team behind Authsome. Integration patterns, agent credential workflows, security tradeoffs, and product updates. Written for builders, not buyers.
GitHub token hygiene for AI agents: PATs, fine-grained tokens, GitHub Apps, and OAuth.
GitHub offers four ways to authenticate an AI agent and they are not interchangeable. A ranked deep-dive on scope, lifetime, revocation, and audit attribution, with copy-pasteable examples.
Running AI agents safely in CI/CD: a 2026 hardening guide.
The Comment and Control disclosures in 2025 showed a PR title can be enough to exfiltrate ANTHROPIC_API_KEY and GITHUB_TOKEN from CI-resident AI agents. Here is where the secrets actually live in a GitHub Actions run, the OIDC and egress patterns that shrink the blast radius, and a worked example.
Managing multiple GitHub accounts for AI agents.
Work and personal GitHub identities, both reachable from the same shell, with the right one picked per task. The actual mechanics, not the wishful version.
