Post #3649827

@jzb@hachyderm.io @forgejo@floss.social You are correct, it requires either admin credentials or an internal access token that Forgejo uses to communicate with itself in some situations. Recommend checking the security team's full statement here https://codeberg.org/forgejo/website/issues/839#issuecomment-14208296 That internal token is discussed here if you're curious about it https://codeberg.org/forgejo/forgejo/issues/12387