4 ms·

Github already has per-repo scope, and has supported that for at least several years AFAIR.

• daenney 5y ago
  Unfortunately no. GitHub Apps can be scoped to a repo, GitHub OAuth tokens cannot. A lot of things fall in the second category. You’ll also discover this if you try to create a personal access token, it’s all repos, you can’t limit them to a particular repo.
  • lmeyerov 5y ago
    Disturbingly, their own products like azure dev portal largely push you into such a grant-universal-access-for-every-contributor path Their sec org is impressive, so these occasional massive things have been surprising