[bsimpson]

Is there any way to limit what access CircleCI has to my GitHub account/orgs? GitHub says you have "Full control of private repositories," but it seems like all you need is read access + a push webhook.

[kevinburke]

IIRC Circle needs to tell Github whether the build succeeded or failed.

It would be nice if Github offered more granular permissions.

[lancefisher]

When I need more granular access, this is how I set it up:

1) Create a new GitHub user: e.g. ([e-mail]) 2) Grant read-only access to specific repositories to the new user. 3) Configure CI to use that user.

[daxelrod]

GitHub recently added a repo:status OAuth scope for this use case. Unfortunately, I still don't see a scope for read-only access to repo code.

https://developer.github.com/apps/building-integrations/sett...