Details
-
Improvement
-
Status: Open
-
Major
-
Resolution: Unresolved
-
None
-
None
-
None
Description
GitHub's token scopes have all sorts of problems. Most people are better off using a custom PAT (despite all the security issues...), but that won't help us under GitHub Actions where the scopes change between forked and non-forked. Worse, there doesn't appear to be a single API that can be used to determine what is possible.
So rather than throw errors, do all the painful work to figure a) what kind of token was passed and b) what functionality can be enabled.
Note: I've got a support ticket in with GitHub on this one.