PAT token security

[weevil44]

Isn't it generally a bad idea to include your PAT token in the file? Even if I am just putting it in for testing, seems ripe for accidentally checking it in to source control. What is the suggestion for a more secure method?

[typorian]

Depends entirely on your deployment environment, some environments allow setting environment variables, then the token will be protected from ending up in version control.