fix: stop fetch_github_stars from falling back to the gh CLI token

The recipe fell back to the gh CLI OAuth token (repo, workflow, gist, read:org scopes) for a job that reads only public data, and a missing GITHUB_TOKEN silently escalated to it.

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
Vinta Chen
2026-11-01 09:48:24 +08:00
co-authored by Claude
parent 2b5e0b1c23
commit 06aa4675c9
+1 -1
View File
@@ -5,7 +5,7 @@ install:
uv sync --locked
fetch_github_stars:
GITHUB_TOKEN="$${GITHUB_TOKEN:-$$(gh auth token)}" uv run python website/fetch_github_stars.py
uv run python website/fetch_github_stars.py
fetch_pypi_downloads:
uv run python website/fetch_pypi_downloads_via_clickpy.py