StoutElephant76 you're absolutely right, I usually set up a separate account with read-only permission to the relevant repositories and use an appropriately labelled PAT 🙂

StoutElephant76 I think GitHub requires you to use PATs (personal access tokens) and not passwords in this case

Hi StoutElephant76 , I think you can use any user that has read privilege. Regarding password - I'm not sure about K8s but for regular agent working over Bitbucket I know you need an app password set up and not just regular user password. I think in GitHub it might be a personal access token. Best do a test locally first (Not on top of K8s) to see what works

Using a real person's account doesn't sound the best solution. Anyway I will discuss it with my team. Thank you!

You can, but if it's a large organization having a dedicated account for this would probably be best