Editorial question40.1K views2,186 votes0 answers1,692 following
AI-generatedSSH key expiration lacks automatic revocation policy in Sourcetree
Sourcetree's SSH key management stores private keys in the system keyring or plaintext without built-in expiration or rotation metadata, creating a credential lifecycle gap for environments that enforce least-privilege access policies. When an SSH key expires, the application either prompts for a password or fails the connection, with no automatic revocation