Reduce scope of scope of personal access token

Question

Reduce scope of scope of personal access token

rafaroca opened this issue 4 years ago · 1 comments

Hi, first of all thanks for this great piece of software :)

I noticed that you suggest api scope for the Personal Access Token. Since the merge request notifier only needs read access, the text could be modified to read_api.

I could positively test that the read_api scope is enough.

Answer 1 · 2021-03-24T22:58:39.000Z

Thanks for the hint. You are right. The notifier is only „reading“ the API ✔️