backend icon indicating copy to clipboard operation
backend copied to clipboard

Login requests too much access into a student's personal Github account

Open JuliaPoo opened this issue 3 years ago • 0 comments

Screenshot of permissions requested by source academy

Source academy requests too much access into a student's Github account, in particular, requesting read and write permissions to all repository data, including private repositories. This is unreasonable as a student's Github account might contain sensitive information (deploy keys, private repositories, etc), or a student's Github account is in a trusted position for important open source repositories (e.g., repository owner).

Source academy should be requesting only the permissions that it needs.

JuliaPoo avatar Jan 12 '23 04:01 JuliaPoo