{"slug": "99-of-repository-access-tokens-never-expire", "title": "99% of repository access tokens never expire", "summary": "Ninety-nine percent of repository access tokens never expire, leaving accounts able to copy or change company code after the work they were granted for ends, according to BlueFlag Security's The State of Developer Risk 2026 report. The report attributes the exposure to unreviewed permissions held by developers, contractors, service accounts, bots and AI coding agents across code repositories, review systems, build pipelines and connected applications.", "body_md": "Developers, automated tools and AI coding agents hold permissions that can outlast the work they were granted for. Without access reviews, organizations can leave accounts able to copy or change company code after the work ends, according to BlueFlag Security’s The State of Developer Risk 2026 report. Development accounts and tools create security blind spots Software development spans code repositories, review systems, build pipelines and connected applications. Developers, contractors, service accounts, bots and AI coding … [More](https://www.helpnetsecurity.com/2026/11/06/blueflag-ai-agents-access-risks-report/) \n\nThe post [99% of repository access tokens never expire](https://www.helpnetsecurity.com/2026/11/06/blueflag-ai-agents-access-risks-report/) appeared first on [Help Net Security](https://www.helpnetsecurity.com).", "url": "https://wpnews.pro/news/99-of-repository-access-tokens-never-expire", "canonical_source": "https://www.helpnetsecurity.com/2026/11/06/blueflag-ai-agents-access-risks-report/", "published_at": "2026-11-06 05:30:23+00:00", "updated_at": "2026-11-06 05:52:03.578576+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "developer-tools"], "entities": ["BlueFlag Security", "The State of Developer Risk 2026", "Help Net Security"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/99-of-repository-access-tokens-never-expire", "markdown": "https://wpnews.pro/news/99-of-repository-access-tokens-never-expire.md", "text": "https://wpnews.pro/news/99-of-repository-access-tokens-never-expire.txt", "jsonld": "https://wpnews.pro/news/99-of-repository-access-tokens-never-expire.jsonld"}}