GitHub 个人访问令牌 scope 仅用于从私人仓库获取发布数据

Question

To get personal access tokens: https://github.com/settings/tokens

I have a private repository, from which I want to get the releases data ( https://github.com/**user_name**/**repo_name**/releases ) . What scopes should I use for that purpose?

Important note: I just want auth to the releases data only, not to the whole private repo.

What I've tried: this post suggests to use Full control of private repositories scope , but I don't want to authorize the whole repository access, just the releases data.

Answer 1

Regarding API calls , the documentation still mention:

A token with repo scope returns a response that includes all public and private repositories we have access to see on github.com.

And that scope does grant full access to private and public repositories.

Try with a token screated with repo:status , for testing: that would not grant write access.