Securing non-human identities: automated revocation, OAuth, and scoped permissions

Cloudflare announces updates to protect non-human identities and credentials: new scannable API token formats (with checksums) and GitHub secret-scanning integration to detect and auto-revoke leaked tokens; improved OAuth consent and connected-app visibility with revocation; Data Loss Prevention integrations across Cloudflare Gateway, Email Security, CASB, and AI Gateway to block credential exfiltration; and expanded resource-scoped RBAC and new account/zone roles to enforce least-privilege.