6 ms·

Tried a public repo but it asked for a personal access token? No thanks. Otherwise great idea, but why should I give a personal access token for something that'

by SCUSKU 1y ago

Tried a public repo but it asked for a personal access token? No thanks. Otherwise great idea, but why should I give a personal access token for something that's publicly available, it really does not inspire confidence.

pmig 1y ago
Thanks scusku, the personal access token does not have any additional permission, we just need to avoid getting rate limited.
- kissgyorgy 1y ago
  Why don't use your own personal access token?
  - dylan604 1y ago
    never pay for something yourself when you can have someone else pay for it. it's a useful concept that can be used in many many cases. the 1%ers love this concept
  - pmig 1y ago
    We did, bur ran into the API limits as oder/scorecard alone is quite expensive on GitHub request
    - rglover 1y ago
      Implement an OAuth flow with Github and then you can avoid that entirely.
      - pmig 1y ago
        Gods point, will work on that!
- Sleaker 1y ago
  Sharing a GitHub API token to bypass rate limiting is explicitly in violation of section H of the terms on GitHub usage. https://docs.github.com/en/site-policy/github-terms/github-terms-of-service#h-api-terms https://docs.github.com/en/site-policy/github-terms/github-t...
  - pmig 1y ago
    Most applications are designed in that way, think about ossf scorecard, star-history.com etc..