An installed GitHub App needs the enterprise_credentials write permission. Requests can cover up to 50 organizations and use a token identifier or key fingerprint instead of the secret itself. Membership checks still apply, and already-authorized credentials are skipped.
Go to the source
Source announcement: . This is an original summary, not independent on-the-ground reporting.