fix required inputs

Signed-off-by: Julio Jimenez <julio@clickhouse.com>

Author: juliojimenez

README.md

@@ -8,7 +8,7 @@ Downloads SBOMs from GitHub. Uploads to S3 and ClickHouse.
 
 | Name                  | Description                          | Default        | Required | Sensitive |
 | --------------------- | ------------------------------------ | -------------- | -------- | --------- |
-| github-token          | GitHub token for authentication      |                | true     | true      |
+| github-token          | GitHub token for authentication      |                | false    | true      |
 | ghapp-token           | GitHub App token for authentication  |                | false    | true      |
 | aws-access-key-id     | AWS access key ID for S3 uploads     |                | true     | true      |
 | aws-secret-access-key | AWS secret access key for S3 uploads |                | true     | true      |
@@ -20,6 +20,10 @@ Downloads SBOMs from GitHub. Uploads to S3 and ClickHouse.
 | ref                   | Git reference (branch, tag, commit)  | main           | false    | false     |
 | clickhouse-url        | ClickHouse URL for uploads           |                | false    | false     |
 
+### Notes
+
+- Either `github-token` or `ghapp-token` must be provided for authentication to the GitHub API.
+
 ## Usage
 
 ### Same Repository

action.yml

@@ -4,7 +4,7 @@ author: 'Your Name'
 inputs:
   github-token:
     description: 'GitHub token for API access'
-    required: true
+    required: false
   ghapp-token:
     description: 'GitHub App token for API access'
     required: false

entrypoint.sh

@@ -28,7 +28,7 @@ log_error() {
 
 # Validate required environment variables
 validate_env() {
-    local required_vars=("GITHUB_TOKEN" "AWS_ACCESS_KEY_ID" "AWS_SECRET_ACCESS_KEY" "S3_BUCKET" "REPOSITORY")
+    local required_vars=("AWS_ACCESS_KEY_ID" "AWS_SECRET_ACCESS_KEY" "S3_BUCKET" "REPOSITORY")
 
     for var in "${required_vars[@]}"; do
         if [[ -z "${!var:-}" ]]; then