GitHub Enterprise adds credential inventory exports

Enterprise owners can now export a complete inventory of every credential that can access their enterprise (e.g., SSH keys, classic and fine-grained personal access tokens, OAuth App access tokens, and GitHub App user-to-server and installation tokens).

This enables enterprise owners with a single plane view into all the credentials owned by members and apps across their enterprise. During a security incident, this enables their security teams to quickly assess the risk surface area and plan remediation and communications based on the identified set of compromised tokens.

With this release, enterprise owners and members with the fine-grained permission View enterprise credentials can:

• Export the inventory from enterprise settings or programmatically retrieve it through a paginated REST API.
• View the full credential inventory CSV or filter by user, app, credential type, or organization.
• Review credential metadata, including owners, scopes and permissions, creation and expiration dates, last-used dates, and target organizations or repositories.
• Correlate credentials with audit log activity to get more insights about their usage and risk exposure.

If you’re an enterprise owner, you can find the “Export CSV” setting in your enterprise Settings->Authentication Security ->Credentials, next to the “Overview” section. Alternatively you could programmatically call the new REST API endpoints to build your own reporting and automation.

This release is available now for GitHub Enterprise Cloud and will be supported in upcoming releases of GitHub Enterprise Server.

To learn more, see our documentation on responding to security incidents in your enterprise by reviewing credentials in your enterprise and the new Rest API to export credential inventory.

The post GitHub Enterprise adds credential inventory exports appeared first on The GitHub Blog.