One of my favorite is creating an API token for something that needs to read PRs and milestones. "Full control of private repositories" is the only option that

One of my favorite is creating an API token for something that needs to read PRs and milestones. "Full control of private repositories" is the only option that works :D SaaS CI/CD permissions are a bit of a mess too; not sure what the ratio of blame on that is though TBH.