Essentially how GitHub works is, when you sign in with the app, the app requires knowledge and data from the user. For example a simple GitHub integration telling you how many stars your repos have, they may need read access.
When you're asked to sign in, it will show you, this application can:
1. Read and manage your stars
2. Read and manage your repositories.
Be very careful when granting applications access because they can misuse it like this. GitHub integrations should be verified for editing repos and editing stars of the user, but that's just my opinion.
When you're asked to sign in, it will show you, this application can:
1. Read and manage your stars 2. Read and manage your repositories.
Be very careful when granting applications access because they can misuse it like this. GitHub integrations should be verified for editing repos and editing stars of the user, but that's just my opinion.