Grafana's GitHub keys go walkabout

It appears the fine folks at Grafana decided their proprietary code was a bit too lonely, so they accidentally shared a GitHub token with an extortionist who promptly downloaded the lot. This little oversight impacts anyone relying on Grafana's supposedly secure development environment, which has now been treated like an open buffet for code thieves. To protect ourselves from this repetitive nonsense, one might try the radical concept of auditing token permissions before they become public property, though I suspect we’ll just be back here next week. We should probably rotate our own secrets before they decide to retire early to a hacker's hard drive, not that anyone actually listens to the helpdesk.