search

SantiMA10 / devops-streamdeck

👀 Check the status of your CI/CD environments using your Stream Deck.
MIT License
99 stars 13 forks source link

Use fine-grained personal access tokens on GitHub #69

Closed DennisBecker closed 10 months ago

DennisBecker commented 1 year ago

The classic personal access tokens have a higher risk if they get compromised / stolen compared to a fine-grained access token.

It would be nice if the README details which rights are needed so a fine-grained access toen can be used easily.

SantiMA10 commented 1 year ago

I can investigate, but if you know which are the fine-grained options that the plugin need, feel free to open a PR with the change or comment it here and I will apply it to the README.

DennisBecker commented 1 year ago

I have tried it but it did not work. As I cannot remove the GitHub account or update the token, I cannot test it. The fine-graned tokens also always expire after 30, 60 or 90 days or you set an expiration date.