spdx-online-tools
spdx-online-tools copied to clipboard
Move to Github Apps for Submitting License Requests
Currently, we use Github OAuth Apps to create issues in license-list and license-namespace repository. But Oauth apps have limited no of fixed permission with no way to modify read/write access. https://developer.github.com/apps/building-oauth-apps/understanding-scopes-for-oauth-apps/#available-scopes Github Apps provide finer-grained permissions - https://developer.github.com/apps/differences-between-apps/
We would like to move to Github Apps. For this, I suppose, changes will be needed only on the code side (utils.py) and requesting only the permissions which is needed - able to create issues in the https://github.com/spdx/license-list/ and https://github.com/spdx/license-namespace/ repo.
Linked Issue - #192
@rtgdk - is this still live?
Because the #192 was closed, I re-reported it as #498. The all repos write permissions are potential security problem.