Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Github app permission does not affirmatively provide scope of permission #3722

Open
CharlesBelov opened this issue Jul 22, 2022 · 0 comments

Comments

@CharlesBelov
Copy link

https://github.com/webcompat /
webcompat.com issue GitHub App permission #3626 states that Webcompat has been changed to a Github app and only requests permission for webcompat/web-bugs. However, when I try to log in to Webcompat or submit an issue, I get the message:

webcompat-app by WebCompat would like permission to:
Verify your GitHub identity (CharlesBelov)
Know which resources you can access
Act on your behalf

with no mention of any repository restriction.

I would only feel comfortable granting this permission if GitHub specified that as scope.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant