Fine-grained Access Token Continually Revoked

[jonolane]

Select Topic Area

Question

Body

Hi everyone,

Been out of practice for awhile so apologies for the fairly pedestrian question. I am wanting to use Github Pages to host my public repository (I can't pay for the accounts that offer Github Pages from private repos). I am authenticating to the Github API via Fine-grained PAT in attempt to showcase my Github repositories. This works fine until I run a CI/CD deploy script or push changes - when doing so, my access token is immediately revoked.

It is clear why from the docs: "If a valid OAuth token, GitHub App token, or personal access token is pushed to a public repository or public gist, the token will be automatically revoked."

However, I am passing this token as an environment variable which is not being tracked by git or Github. Would anyone be able to weigh in on why, then, my access continues to be revoked on push or deploy? I've emptied build caches, etc.

Thanks in advance