Conversation

Only apps can list fine grained tokens that have access to org resources.

Me, an admin for a Github Enteprise, a human - nope. I can look at the list via the admin UI. But I can't have an API.

W
T
F

Like, how am I supposed to run an audit of tokens?

Wait. How are **GitHub** running an audit of tokens?