Just in case anyone is still coming here like I did and is confused because even when using the afore mentioned API header method, your command is now returning 403 Forbidden:
Make sure you give the API token access to your repositories.