5 ms·
Please remove the access to Private Repositories, or make it optional.
by jud_white 11y ago
Please remove the access to Private Repositories, or make it optional.
- mixonic 11y agohttps://api.monosnap.com/rpc/file/download?id=kelMhl0A6kbbaNs8vTWO9Z9oe15g0c https://api.monosnap.com/rpc/file/download?id=kelMhl0A6kbbaN... Haha, yes this is a pretty high bar of entry.
- jicooo 11y agoWhat, you don't trust me with ALL YOUR REPOS? Haha. I know, I mentioned this permissions thing in the blog post. Building it for myself, that scope is the only way I could read contributor stats for my company's private repos. Definitely don't need 90% of the other things, write access especially. Optional private repository access seems like a good solution.
- jicooo 11y agoGood suggestion, I like the idea of making it optional.
- lorenzfx 11y agoand why does it need write access?
- cheshire137 11y agoThat's what made me not do it. To be fair, I wrote a Github app once where I wanted read access to public and private repos, and I couldn't find anything in the Github API to give me specifically that. I had to request read+write for public+private, which is horribly permissive and gave me access to a bunch of stuff my app didn't need.
- jicooo 11y agoYeah, I wish there were more fine-grained controls for permissions, i.e. just let me access meta-data like stats for repos (because that's all this app really needs).