#personal-access-token

Sandbox Mode vs. Limited‑Access PAT: Which Keeps Production Credentials Safe?

Sandbox Mode Codeac’s documented “sandbox mode” is intended to simulate repository interactions locally, preventing real API calls. In theory, it allows a scan to run without contacting GitHub, GitLab, or Bitbucket, thus eliminating any risk of accidental writes or rate‑limit violations. Limited‑Access Personal Access Token Alternatively, a dedicated test re