#Access private repos using Github Actions
1 messages · Page 1 of 1 (latest)
I suggest creating a bot account with minimal repository permissions and using its generated token instead of your personal account.
One more alternative would be using Fine-grained personal access token from your personal account
Ahhh. Hmm. I resisted that option because it takes up an extra seat in the org, but then I've been going down the rabbit hole of how to do the credential rotation etc etc and it's maybe easier to just take the $4 a month on the chin haha
it's possible to create token for specific repositories
Mhmm; that option i kind of dislike because it ties the programmatic access to a specific user. Cleaner to have the machine user play that role, really
Yes, unfortunately, there are no bot accounts in github. If you dislike both of the solutions than I would recommend simple github app handles the tokens. A little bit more effort to do it. But it won't take a seat in org and touch your personal account
Just a question why do you want to connect private repos? if it's for private actions or re-usable workflows. there is alternative solution