Github does not separate starring. It falls under the public_repo scope, which i... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		grumple on Dec 9, 2022 \| parent \| context \| favorite \| on: Ask HN: Developer abused “sign in with GitHub”? Github does not separate starring. It falls under the public_repo scope, which is one of the fundamental scopes. Source: https://docs.github.com/en/developers/apps/building-oauth-ap... "public_repo Limits access to public repositories. That includes read/write access to code, commit statuses, repository projects, collaborators, and deployment statuses for public repositories and organizations. Also required for starring public repositories."

masklinn on Dec 9, 2022 [–]

FWIW under the new fine-grained permission model (used by github apps, and the fine-grained personal access tokens currently in beta) "starring" is its own account-level permission: https://docs.github.com/en/rest/overview/permissions-require...

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact