prmonitor icon indicating copy to clipboard operation
prmonitor copied to clipboard

Fine-grain GitHub API access

Open srabraham opened this issue 3 months ago • 1 comments

Currently PR Monitor asks for a GitHub access token with "repo" scope. That scope grants a ton of access, including write access to all code available to a user.

Now that GitHub has "fine-grained tokens", could PR Monitor request one of those with only the access that it actually needs?

Thanks! Sean

srabraham avatar Oct 02 '25 14:10 srabraham

@srabraham I was able to use PR Monitor successfully with a fine-grained token that grants read-only access to Commit statuses, Contents, and Pull requests, as shown in the screenshot. Please give it a try!

Image

sun-yryr avatar Dec 06 '25 16:12 sun-yryr