Permissions: Write Access about alfred-github-workflow

[fclaussen]

Is this still not possible?

[gharlan]

What is the "write" permission used for?

It's not used.
https://developer.github.com/v3/oauth/#scopes
Sadly there is no readonly scope for public and private repository data. That's the reason.

Is it possible to use this workflow by only approving "read" permissions?

Yes, but you will lose access to your private repos via this workflow.
You have to call this url: https://github.com/login/oauth/authorize?client_id=2d4f43826cb68e11c17c&state=1&scope=

Do you have any plans to allow approving only "read" permissions?

Yes, once there is a repo_read scope..

[gharlan]

PS: It bothers me, too!

[dcalhoun]

Ok. Thanks for all the information. That's a bummer that this is a limitation of the GitHub API. The write access is a little unnerving, particularly for repositories owned by organizations to which I belong.

I hope the GitHub team adds the repo_read scope. Do you know if there is a place to request such features or provide feedback for the GitHub API?

[gharlan]

Do you know if there is a place to request such features or provide feedback for the GitHub API?

There is no special contact page for the api, so: https://github.com/contact

[fabOnReact]

https://circleci.com/blog/jan-4-2023-incident-report/