A questions regarding the REST API: If I try to trigger a deployment for a private repository via REST API and use a GitHub personal access token, what permissions are needed for the token? Both for the classic tokenas and the new fine-grained tokens? It works fine to run via the classic tokens and if I pick all the repo permissions, but would rather know more in detail what it would need and preferably also for the fine-grained tokens. I could not find that in the docs.

Hello again Erik! The token needs to have access to the specific private repo that you would like to deploy, along with read-only access to the contents and metadata (which is mandatory from the github side). That's if using fine-grained tokens.