JoshuaKGoldberg / JoshuaKGoldberg/create-typescript-app

📝 Documentation: Exactly which granular token permissions are necessary?

Open
#925 1 comment 1 reaction 0 assignees View on GitHub
area: documentation status: accepting prs
Dominant language
TypeScript
Stars
1.4k
Forks
89
Avg merge
1m
Merged PRs (30d)
3

Description

### Bug Report Checklist

- [X] I have pulled the latest `main` branch of the repository.
- [X] I have [searched for related issues](https://github.com/JoshuaKGoldberg/create-typescript-app/issues?q=is%3Aissue) and found none that matched my issue.

### Overview

Right now, the docs generally phrase the GitHub Personal Access Token ("PAT") required for the repository's `ACCESS_TOKEN` secret as needing _"`repo` and `workflow` permissions"_. That terminology adheres to the [classic PATs](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens#creating-a-personal-access-token-classic) that I've been using.

But, GitHub now has ["fine-grained" PAT](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens#creating-a-fine-grained-personal-access-token) support in beta. The docs should mention exactly which fine-grained token permissions are necessary (if they actually work in this template yet).

### Additional Info

Mentioned by @KATT as working in https://github.com/KATT/tupleson, I hope.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.