Thanks for reporting this! Sometimes apps support only "all or nothing" permissions (called "oauth2 scopes"), i.e. to request feature A from the app, we have to

Thanks for reporting this! Sometimes apps support only "all or nothing" permissions (called "oauth2 scopes"), i.e. to request feature A from the app, we have to request features B and C too, because some scope enables A, B and C simultaneously. But this particular GitHub case seems to be different. So it's fixed.