GitHub token validation regular expressions.

README.md

GitHub token validation regular expressions

Regular expressions to check if a given GitHub token could be valid.

• Personal access tokens (classic)
• Fine-grained personal access tokens
• GitHub Actions
• Combined together

Personal access tokens (classic)

Classic personal access tokens are 40 characters in length, with a prefix of ghp_:

^ghp_[a-zA-Z0-9]{36}$

Fine-grained personal access tokens

Fine-grained personal access tokens (currently in beta) are 93 characters in length, with a prefix of github_pat_:

^github_pat_[a-zA-Z0-9]{22}_[a-zA-Z0-9]{59}$

GitHub Actions

Temporal tokens generated by GitHub Actions are 40 characters in length, with a prefix of ghs_:

^ghs_[a-zA-Z0-9]{36}$

Combined together

^(gh[ps]_[a-zA-Z0-9]{36}|github_pat_[a-zA-Z0-9]{22}_[a-zA-Z0-9]{59})$

Related

• https://github.blog/changelog/2021-03-31-authentication-token-format-updates-are-generally-available/

@magnetikonline Thank you very much!