access-token not needed in scrutinizer for private repositories