Require token coverage for security alerts, advisories and REST issue writes

Alert reads, private advisory visibility and reporting, and opening issues or commenting on public repositories were granted on the user's identity alone; a fine-grained token must now list the repository.

Assisted-by: Crush

taigrrcommitted 2 days agoparent eac44824c0098ef5673838c669ccd2e036d26fe55304377Browse files