SecretsGitHub tokens explained: PAT classic, fine-grained, OAuth — and their blast radius All three are 'a GitHub token,' but a leaked one can mean very different things — from a single repo to your entire account. The difference is scope. Aug 13, 2026 · 3 min read