4

To get personal access tokens: https://github.com/settings/tokens

I have a private repository, from which I want to get the releases data (https://github.com/**user_name**/**repo_name**/releases). What scopes should I use for that purpose?

Important note: I just want auth to the releases data only, not to the whole private repo.

What I've tried: this post suggests to use Full control of private repositories scope, but I don't want to authorize the whole repository access, just the releases data.

marc_s
  • 732,580
  • 175
  • 1,330
  • 1,459
Ecto Ruseff
  • 141
  • 1
  • 9

1 Answers1

1

Regarding API calls, the documentation still mention:

A token with repo scope returns a response that includes all public and private repositories we have access to see on github.com.

And that scope does grant full access to private and public repositories.

Try with a token screated with repo:status, for testing: that would not grant write access.

VonC
  • 1,262,500
  • 529
  • 4,410
  • 5,250
  • `repo:status` working fine for public repositories, but **not for private** repositories – Ecto Ruseff Feb 12 '21 at 16:17
  • @EctoRuseff Then, in term of '`scope`', there is only `repo`, which does grant write access to private repos... – VonC Feb 12 '21 at 16:47