Avoid personal access tokens

[mcollina]

There are people (like me), that cannot share their personal access token for security reasons as the token will be able to do the same thing you can do. I certainly do not want to share this with Travis.
I spoke with @gr2m about this, and I think there is a more granular way of dealing with these settings, maybe we can suggest to create a OAuth application, restrict the scope and then login with https://developer.github.com/apps/building-integrations/setting-up-and-registering-oauth-apps/about-authorization-options-for-oauth-apps/#non-web-application-flow

The current solution to this problem is to create a single-purpose account.

I will work on a little prototype when I get the chance.

[gr2m]

This would make a great tutorial / screencast to do for reference, I’ve seen this topic come up over and over again :) I’d do it myself but can’t in August. But ping me if you have any specific questions