As mentioned in https://docs.codecov.com/docs/status-badges#badges-for-private-repositories - private repo badges need to include the token query parameter e.g. https://codecov.io/github/codecov/gazebo/graph/badge.svg?token=ASDF123456
Since badge URLs get pasted in READMEs, they may get accidentally published when making the repo public.
Could you confirm what's the scope of this token and what are the consequences of leaking it?
As mentioned in https://docs.codecov.com/docs/status-badges#badges-for-private-repositories - private repo badges need to include the token query parameter e.g.
https://codecov.io/github/codecov/gazebo/graph/badge.svg?token=ASDF123456Since badge URLs get pasted in READMEs, they may get accidentally published when making the repo public.
Could you confirm what's the scope of this token and what are the consequences of leaking it?