Speaking of Github, their auth story feels so incredible frustrating:
- classic PAT
- fine-grained PAT
- Github Apps
- deploy keys
...and all have major drawbacks.
What do you use on the servers after the webhook triggered? Using a PAT to access GH feels so incredible bad/dirty.
You don't happen to know someone at Github that we could try to annoy into some progress?