JoshuaKGoldberg / JoshuaKGoldberg/create-typescript-app
📝 Documentation: Exactly which granular token permissions are necessary?
- Dominant language
- TypeScript
- Stars
- 1.4k
- Forks
- 89
- Avg merge
- 1m
- Merged PRs (30d)
- 3
Description
### Bug Report Checklist
- [X] I have pulled the latest `main` branch of the repository.
- [X] I have [searched for related issues](https://github.com/JoshuaKGoldberg/create-typescript-app/issues?q=is%3Aissue) and found none that matched my issue.
### Overview
Right now, the docs generally phrase the GitHub Personal Access Token ("PAT") required for the repository's `ACCESS_TOKEN` secret as needing _"`repo` and `workflow` permissions"_. That terminology adheres to the [classic PATs](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens#creating-a-personal-access-token-classic) that I've been using.
But, GitHub now has ["fine-grained" PAT](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens#creating-a-fine-grained-personal-access-token) support in beta. The docs should mention exactly which fine-grained token permissions are necessary (if they actually work in this template yet).
### Additional Info
Mentioned by @KATT as working in https://github.com/KATT/tupleson, I hope.
Contributor guide
Assessment
This issue has not been assessed yet.