A Github release has been made whose repository is private.

Anybody can download that release (source code as tar files) using wget or curl command.

Should wget or curl embed personal access token(authorization) associated with theprivate repo in order to download the tar files every time?

Thanks in advance.

CodePudding user response：

If a repository is set to private, then its releases are also private.

If your objective is to provide public releases while maintaining private source code, then you'll need to publish the releases using a different channel (a mechanism separate from that private repository).

One way is to maintain a separate public repository just for the release artifacts. Another way is to use GitHub's dedicated packages feature (if it applies to your artifacts).

In response to the question in your comment:

Now, the question is that someone wants to download the release from that private repository. Should he need the personal access token in order to download the tar files?

Yes. See Creating a personal access token in the docs.