GitHub CLI's New Expiring Tokens Still Leave Your Refresh Token Exposed to Malware
GitHub CLI (gh) recently added short-lived access tokens that are refreshed automatically. It is a public preview and opt-in for now, but it is planned to become the default. https://github.blog/chang