Authentication

The GitHub REST API declares 0 security schemes. The client sends each credential only on the operations whose security requirement accepts that scheme, so one configured client covers every operation.

Configuring the client

Credentials go on the client once, when it is created, and the SDK attaches the right one to each request.

ts
const client = new GitHubV3REST({
  baseUrl: "https://api.github.com",
});
Keep credentials out of source control

Read them from the environment or a secrets manager, as the quickstart does. A key committed to a repository should be treated as leaked and rotated.