Currently we only support authenticating with Bugzilla via username/password: https://github.com/WebKit/WebKit/blob/586aa00275b46a60eca5c692d81de42e51882171/Tools/Scripts/libraries/webkitbugspy/webkitbugspy/bugzilla.py#L179-L192 This is distinctly less than ideal. This doesn't work for people logged in via GitHub OAuth, and also obliges everyone to give us their password (and thus only have "change their password" as a way to safely revoke access). It would be better to support API keys: https://bugzilla.readthedocs.io/en/5.0.4/api/core/v1/general.html#authentication (and https://bugzilla.readthedocs.io/en/5.0.4/using/preferences.html#api-keys for the user-side).