Skip to content

Make SUPABASE_ACCESS_TOKEN non-personal and instead project specific #393

@Magnuti

Description

@Magnuti

Configure GitHub Actions

The Supabase CLI requires a few environment variables to run in non-interactive mode.
SUPABASE_ACCESS_TOKEN is your personal access token

Forcing us to use the personal access token that has access to the whole account seems like a security issue. I would like to generate a project specific access token that I can use in the respective GitHub actions repository.

If someone gets access to my personal access token in one GitHub repository, then that access token can be used on all my Supabase organization and all my projects.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions