GitHub App permission

[Mte90]

This is what GitHub suggest to me for the login.
I don't understand why should be able to write all those information in my repositories.
Should asks just for the user and not also for the various organizations I am part of?
I am not able to login as I don't want to share permission for all of them.

[ksy36]

Thanks for reporting @Mte90. Unfortunately, Github doesn't have granular permissions for Oath apps (dear-github/dear-github#113), so in order to file an issue on your behalf, we're requesting public_repo scope, which is essentially granting access to all public repositories, and indeed is excessive.

I'm looking into converting our Oath app into Github app, which will allow granting permission only on the repository where the Github app is installed (webcompat/web-bugs specifically). It's tracked in this issue #655. Until it's converted, you can file a report anonymously.

[ksy36]

Just an update here, I've converted the Oath app to a Github app, so it will only ask for permissions for webcompat/web-bugs from now on.

[Mte90]

Thanks!