GitHub · GH-100
Tokens, rate limits, and apps
GH-100 · Lesson 12 of 17 · 1:37:33
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the GH-100 exam (GitHub Administration). In this lesson: fine-grained and classic personal access tokens, token policies for organizations and enterprises (restriction, maximum lifetime, approval), REST API primary and secondary rate limits, GitHub Apps versus OAuth apps, and approving or restricting app access. Includes three original practice questions.
Preview the topics
- Contoso wants to stop every classic token from accessing its organizations, and to check each fine-grained token before it can reach them. What should the enterprise owner configure?
- Contoso’s nightly sync of four thousand repositories runs through a GitHub App installed on its Enterprise Cloud organization, with an installation token. What is its primary rate limit?
- A Contoso repository administrator installed a third-party GitHub App on his repositories, without owner approval. The owners want every future installation to go through them. What should they configure?