Show threadgithub.com/ghostwriter3d ago

GitHub Actions token format `ghs_APPID_JWT` (~520 chars, variable length).

Regex

NEW: `ghs_[0-9]+_[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+`

https://github.blog/changelog/2026-04-24-notice-about-upcoming-new-format-for-github-app-installation-tokens/#how-to-prepare-for-this-change

OLD: `ghs_[A-Za-z0-9]{36}`

https://github.blog/changelog/2021-03-04-authentication-token-format-updates/

#GitHub #GitHubAction #GitHubServerToken #GitHubToken #Regex

Notice about upcoming new format for GitHub App installation tokens - GitHub Changelog

Starting April 27th 2026 and over the coming weeks, we will begin a staged rollout that updates the format of newly minted GitHub App installation tokens, making them more performant…

The GitHub Blog