Private repositories aren't discovered automatically

[marcoieni]

With #2630 we periodically scan new repositories and create a PR when a repo is missing.

However, the scan step does not set GITHUB_TOKEN, so repository enumeration is anonymous and only sees public repositories.

Maybe we can use the read only github app that we use for the dry run to discover also private repositories?

[cuba0001]

Looks like there is the .github/actions/generate-tokens/action.yml for that. We should re-use it and somehow pass all of those tokens to check_untracked_repos, right? The step of dry-run sets envs following the GITHUB_TOKEN_ naming pattern. Should it be the same in Check untracked repositories?

[marcoieni]

yes, I think it should work 👍
I saw that we don't track all the org repos, so probably we should generate tokens just for the orgs that we use for the repositories.

[cuba0001]

Then I am up to this.

I saw that we don't track all the org repos, so probably we should generate tokens just for the orgs that we use for the repositories.

I will keep that in my mind.