Cloudflare
Security & compliance
Code quality
Connected Cloudflare API token never expires
Part of the Workers, Pages & API tokens check · fix arrives as a guide
What it is
The connected Cloudflare API token is configured never to expire.
Why it matters
A token with no expiry is a permanent grant. If it leaks through a log, a config file, or a former team member's machine, it stays valid indefinitely and nothing forces a review.
How to fix it
Reissue the token with an expiry — 90 days is a reasonable default — scoped to the minimum permissions needed, and set a calendar reminder ahead of the expiry so rotation is not an outage.
Run them all on your app
Connect your repo and your live services with read-only scopes. The first scan is free, and nothing changes without your approval.