3 ms·
Is there any way to limit what access CircleCI has to my GitHub account/orgs? GitHub says you have "Full control of private repositories," but it seems like al
by bsimpson 9y ago
Is there any way to limit what access CircleCI has to my GitHub account/orgs? GitHub says you have "Full control of private repositories," but it seems like all you need is read access + a push webhook.
- kevinburke 9y agoIIRC Circle needs to tell Github whether the build succeeded or failed. It would be nice if Github offered more granular permissions.
- daxelrod 9y agoGitHub recently added a repo:status OAuth scope for this use case. Unfortunately, I still don't see a scope for read-only access to repo code. https://developer.github.com/apps/building-integrations/setting-up-and-registering-oauth-apps/about-scopes-for-oauth-apps/ https://developer.github.com/apps/building-integrations/sett...
- lancefisher 9y agoWhen I need more granular access, this is how I set it up: 1) Create a new GitHub user: e.g. (circleci-builder@example.com) 2) Grant read-only access to specific repositories to the new user. 3) Configure CI to use that user.