When using the github provider you need to provide a personal access token (PAT), is there an easy way to create a PAT that isn't connected to a "real" user? Ideally, I as an admin, would like to create a token that I can use with pulumi that isn't connected to me or anyone else, but I still want to control what that token can be used for. I can of course create a "dummy" user, but that feels strange and I don't think I'm the only one that would like to have this. I know pulumi can't fix it if the issue if github doesn't support it, I'm just wondering if I've missed something and that it is already possible to create a PAT that isn't attached to a user.

So this is where you'd have a bot or service account for things like this

yes, at Pulumi we have a bot we create tokens against

Doesn't the bot need to have its own PAT? If yes, where does that come from?

It's just another user account, so you get it from the same place. It's just what GitHub does

Does this mean you have to create a user associated with an organisation email?

@quiet-truck-58459, there is not at this time but it's on the Service roadmap to work on