(README.md) Personal access tokens for public user projects

The README says that for

Private repository and project board

the required permission is repo (“Full control of private repositories”).

However, this permission is actually required also for public repositories and project boards.

I’ve tested it with a public user-level Project: https://github.com/users/j1elo/projects/1 and a public repository: https://github.com/j1elo/test-repo

• Using secrets.GITHUB_TOKEN fails with error Resource not accessible by integration (e.g. https://github.com/j1elo/test-repo/actions/runs/274046708)
• Using write:org (“Read and write org and team membership, read and write org projects”) causes an empty GraphQL response and the error Could not find the column "..." or project "..." (e.g. https://github.com/j1elo/test-repo/actions/runs/274113617) – I tried this one just to test if user-level Projects had the same permissions as Organization Projects
• At this point, I tried using all of the repo sub-scopes (repo:status, repo_deployment, public_repo, repo:invite, security_events), and it also causes an empty query response.
• Finally, using the whole repo allowed the query to find the requested Project.

Proposed fix:

Either the README should be updated to reflect that repo is needed also for public user Projects and public repos; or else, if possible at all, the query should be made in a way that doesn’t require full repo permissions just to search for existing Projects.

In any case, thank you very much for this action! 😃

[D4nte]

Now fixed. Thanks!

[D4nte]

So is the proper solution to have a token with whole repo permission?