Confusing and scary OAuth consent screen wording for public repos read-only access

[alanhamlett]

Select Topic Area

Bug

Body

People are confused, rightly so, because the fact it's calling out Also includes public repositores implies the user is granting access to their private repositories, otherwise why would it mention Also public. When in fact, access is requested only for read-only access to public repositories NOT private repos.

This is a bug in the wording of the GitHub Apps OAuth consent screen.

[alanhamlett]

Never mind, I removed Metadata permission and it's fixed. Looks like it actually was requesting access to private repos.