Trim GitHub permissions?

[briancavalier]

This plugin looks really useful. Thanks for your work on it!

However, the GitHub permissions it asks for after clicking Install seemed a bit, well, permissive 😄. For example, it wants read/write for user profile data. Are all of the permissions the plugin asks for required, or can they be trimmed down a bit?

The manual instructions to get a token make it sound like the actual permissions it needs are less.

For now, I'll give it a go with the manual install.

[bswinnerton]

I completely agree.

At the time this plugin was originally written, GitHub Apps - which offer more fine-grained permissions - weren't able to support such a project. I can't remember why exactly, but I think it was because they couldn't be installed on a user, only an organization or repository.

It's been a while since then, so it's worth taking another look. I don't have a ton of bandwidth to do this right now but will try to take a look over the holidays.

[briancavalier]

@bswinnerton Thanks for the info and being open to taking a look. Have a nice holiday.