Skip to content

Conversation

@indcoder
Copy link
Owner

@indcoder indcoder commented Oct 9, 2025

Keep the classic token instructions for users who prefer legacy tokens, and add a recommended Fine‑Grained Personal Access Token (FGA) section with least-privilege guidance (Actions=Read, Contents=Read) and PowerShell export examples.

Rationale:

  • FGA reduces blast radius compared to classic repo scope.
  • Provide both options so users can choose depending on their environment and org policies.

This change is documentation-only.

Copilot AI review requested due to automatic review settings October 9, 2025 04:28
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates the README documentation to provide both classic and fine-grained Personal Access Token (PAT) setup instructions, with a recommendation to use fine-grained tokens for better security through least-privilege principles.

  • Restructures the GitHub Personal Access Token section to include both classic and fine-grained token options
  • Adds detailed guidance for fine-grained tokens with minimal required permissions (Actions=Read, Contents=Read)
  • Includes PowerShell environment variable export examples for fine-grained tokens
Comments suppressed due to low confidence (1)

README.md:1

  • This appears to be debugging or development text that was accidentally included in the documentation. This entire line should be removed as it's not meant for end users.
# GitHub Artifacts Storage Analyzer

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@indcoder indcoder linked an issue Oct 9, 2025 that may be closed by this pull request
@indcoder indcoder merged commit e827564 into main Oct 9, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update README instructions from classic token to FGA token

1 participant