That's good to know, but I would still suggest an on-ramp that only uses GitHub for authentication (i.e. no permissions needed). To that end, it would be nice if I could also authenticate with other OAuth providers instead, like Google, etc.
Again, I understand that this would limit me to scanning public repos, but that would be fine.
Again, I understand that this would limit me to scanning public repos, but that would be fine.