logoalt Hacker News

anon48293 • today at 5:47 PM • 1 reply • view on HN

You also need to know which resources I can access on GitHub. You don’t need that.


Replies

jaffathecake • today at 5:58 PM

This seems like bad wording on GitHub's part https://docs.github.com/en/apps/using-github-apps/authorizin...

> When authorized, the GitHub App will be able to determine which resources you can access that the app can also access.

The 'app' is used for login only. It has no access to resources.