3 ms·

Thanks scusku, the personal access token does not have any additional permission, we just need to avoid getting rate limited.

• kissgyorgy 1y ago
  Why don't use your own personal access token?
  • dylan604 1y ago
    never pay for something yourself when you can have someone else pay for it. it's a useful concept that can be used in many many cases. the 1%ers love this concept
  • pmig 1y ago
    We did, bur ran into the API limits as oder/scorecard alone is quite expensive on GitHub request
    • rglover 1y ago
      Implement an OAuth flow with Github and then you can avoid that entirely.
      • pmig 1y ago
        Gods point, will work on that!
• Sleaker 1y ago
  Sharing a GitHub API token to bypass rate limiting is explicitly in violation of section H of the terms on GitHub usage. https://docs.github.com/en/site-policy/github-terms/github-terms-of-service#h-api-terms https://docs.github.com/en/site-policy/github-terms/github-t...
  • pmig 1y ago
    Most applications are designed in that way, think about ossf scorecard, star-history.com etc..