Hacker News new | ask | show | jobs
by throwanem 3455 days ago
> it's a required scope to get all of the private contrib info out of the API

Is there a technical reason why that's so, or is it just an artifact of the way GitHub's OAuth scheme is set up? I can't think offhand of a reason why it should be the former, but my experience with GitHub private repos is somewhat seldom, so it's quite probable it is necessary for a reason of which I'm unaware.
2 comments
tomschlick 3455 days ago
The new Integrations api they announced at their conference should allow way more granular control. Still in beta though AFAIK.

https://developer.github.com/early-access/integrations/

link
gjtorikian 3455 days ago
You are totally correct.
link
wildpeaks 3455 days ago
I wonder too, especially considering it's possible to have collaborators with read-only access to private repos.
link