Enumerating Work Items as part of a release pipeline

Hello,

I'm trying to develop a script that will execute as part of a release pipeline. The script should enumerate work items returned by a stored query and perform release activites per each work item using some custom fields included in the work item itself.

Looking at the API documentation it seems that I will need to generate a personal access token to give my script access to the Azure DevOps environment to do this activity but my question is - why? If I'm running the python as a release task, technically I've already got "access" by the very nature of the release pipeline itself running as an agent task? Do I really need to generate another token or can I just use the context of the agent? And if so, how?

この issue ではリポジトリのファイルやテストが指定されていないため、personal access tokens の API ドキュメントと、質問で説明されている release-task agent context から始めてください。release pipeline が保存済みクエリの work items を列挙し、別の token なしでそれらの custom fields にアクセスできるかどうかを文書化し、サポートされている認証経路を説明してください。