setup-cli icon indicating copy to clipboard operation
setup-cli copied to clipboard

Make SUPABASE_ACCESS_TOKEN non-personal and instead project specific

Open Magnuti opened this issue 1 month ago • 0 comments

Configure GitHub Actions

The Supabase CLI requires a few environment variables to run in non-interactive mode. SUPABASE_ACCESS_TOKEN is your personal access token

Forcing us to use the personal access token that has access to the whole account seems like a security issue. I would like to generate a project specific access token that I can use in the respective GitHub actions repository.

If someone gets access to my personal access token in one GitHub repository, then that access token can be used on all my Supabase organization and all my projects.

Magnuti avatar Dec 29 '25 16:12 Magnuti