Support for private repositories

[brunolemos]

If you want this feature for your personal private repositories, please react with a 👍.
If you want this for your team/company/organization private repositories, react with a ❤️.
Follow @devhub_app on Twitter to be notified when this becomes available.

Add support for:

• Showing activities of private repositories
• Enhance notifications of private repositories

Implementation requirements

• Request only the permissions that are strictly necessary
  • For this reason, we will need to migrate from OAuth App to GitHub App (see comparison)

Why not enable private access using the current implementation?

GitHub OAuth Apps have a very broad and dangerous permission scope. See this petition for details. For example, to be able read activities (issue comments, ...) from private repositories, we need to request the repo scope. And this is what it gives access to:

As a security precaution, DevHub does not intend to ask for this permission, since it doesn't ever need any code or write access.

---

TL/DR: This feature is planned and is high priority.
But to do it right, first we need to make DevHub work as a GitHub App instead of OAuth App. This will cause an increase of server usage and costs.

Follow @devhub_app on Twitter to be notified when this becomes available.

[ifuller1]

This will cause an increase of server usage and costs.

I'd pay some kind of licensing to use this. Pretty sure others would too, esp if it were on a per-user basis with a sensible cost.

[brunolemos]

@ifuller1 Thanks for your support! I hope more people think like you.

[grrowl]

Would be keen to kick in a few $ for server costs. Probably wouldn't subscribe per-user but would donate especially with transparency around costs on your end. Just my 2c.

[brunolemos]

@grrowl thanks!

[edasque]

Testing this in 4.7.0 (Mac Electron client). I was able to add a repo (having had to install devhub for my org) and it worked. Pretty smooth. Does this work also for the organization tab. I only see activity on public there, no activity on the private repos (the settings have checks on private & public).

[arondeparon]

Currently testing this in 0.47 as well, but even though I have installed the app, it is still telling me to "Install the Github App"

[edasque]

@Arondepardon did you authorize DevHub access to your organization?