1

To get personal access tokens: https://github.com/settings/tokens

I have a private repository, from which I want to get the releases data (https://github.com/**user_name**/**repo_name**/releases). What scopes should I use for that purpose?

Important note: I just want auth to the releases data only, not to the whole private repo.

What I've tried: this post suggests to use Full control of private repositories scope, but I don't want to authorize the whole repository access, just the releases data.

marc_s
  • 704,970
  • 168
  • 1,303
  • 1,425
Ecto Ruseff
  • 81
  • 7

1 Answers1

0

Regarding API calls, the documentation still mention:

A token with repo scope returns a response that includes all public and private repositories we have access to see on github.com.

And that scope does grant full access to private and public repositories.

Try with a token screated with repo:status, for testing: that would not grant write access.

VonC
  • 1,129,465
  • 480
  • 4,036
  • 4,755
  • `repo:status` working fine for public repositories, but **not for private** repositories – Ecto Ruseff Feb 12 '21 at 16:17
  • @EctoRuseff Then, in term of '`scope`', there is only `repo`, which does grant write access to private repos... – VonC Feb 12 '21 at 16:47