At the moment travis-ci.com have oauth scopes that require read / write access to all repos which is a risky thing to give to a third party. travis-ci.org worked without this scope. Is there a plan and timeline to remove this scope from travis-ci.com ?

Yes. We will be moving to integration via GitHub Apps, which provides more granular permissions. See https://blog.travis-ci.com/2018-09-27-deprecating-github-commit-status-api-for-github-apps-managed-repositories

FYI, the “ Set up your open source project now ” button on https://travis-ci.com/plans leads people into this “risky” situation. It seems like that link should direct to travis-ci.org until the open source permissions are fixed on travis-ci.com .

To clarify…if you want to “set up your open source project now”, consider NOT clicking the “Set up your open source project now” button, because it takes you to travis-ci.com/signin which requests read/write permissions for ALL repos in your github account. Instead, consider going to sign up at tra…

Any updates on this? Travis-ci.com still requires GitHub “Third Party Access” with access to all my private repos to operate.

Polite bump for an update here. The sign-in permissions should not need write access. This is not very clear on sign-in, and some users are granting this write permission without understanding what they’re doing.

Hello, is there any ETA when travis-ci.com will fix signup permissions? This is my first experience with travis but was very confused by those 2 domains and mostly that .org needed strict permissions but .com required access to all the code - read and write too. This is probably big blocker for man…

[image] This is how it looks right now.

FWIW it hasn’t changed during the past year at all. October 2018: [image] [image] I’d advice to not grant Travis.com authorization in current state.

I would be fine if there was an official explanation what exact functions need all those access rights. I guess they are probably justified – e.g. to be able to make changes right from a build – but no idea how much.

It seems like travis-ci.org is being migrated over to travis-ci.com which means that folks will have to make a decision, grant this permission or move to a different service.

Is there a plan to stop Travis requesting read / write access on travis-ci.com login?

Travis CI Discussions & Feedback

real-or-random October 29, 2020, 3:57pm 17

Will the permission issues mentioned here be solved before the .org to .com migration deadline?

.org to .com migration deadline?

Topic		Replies	Views
Why does the github integration require such broad permissions? Travis CI Discussions & Feedback	4	877	February 5, 2020
Travis-ci.com privacy concerns Travis CI Discussions & Feedback	2	1055	February 25, 2019
Would like to connect a repo to Travis CI, but the GitHub scope asks for a lot Travis CI Discussions & Feedback	1	660	January 20, 2019
How to set up github.com organization in travis-ci.org that is already setup in travis-ci.com? Travis CI Discussions & Feedback	4	3748	September 18, 2021
Travis requires permissions to other orgs?! Travis CI Discussions & Feedback	1	501	April 22, 2020

Is there a plan to *stop* Travis requesting read / write access on travis-ci.com login?

Related topics

Is there a plan to stop Travis requesting read / write access on travis-ci.com login?