GitHub personal access tokens scope only for getting releases data from private repo

Viewed 1628

To get personal access tokens: https://github.com/settings/tokens

I have a private repository, from which I want to get the releases data (https://github.com/**user_name**/**repo_name**/releases). What scopes should I use for that purpose?

Important note: I just want auth to the releases data only, not to the whole private repo.

What I've tried: this post suggests to use Full control of private repositories scope, but I don't want to authorize the whole repository access, just the releases data.

1 Answers

Regarding API calls, the documentation still mention:

A token with repo scope returns a response that includes all public and private repositories we have access to see on github.com.

And that scope does grant full access to private and public repositories.

Try with a token screated with repo:status, for testing: that would not grant write access.

Related