Flight Log / VikashLoomba/copilot-mcp #44
Remove 'repo' scope from SCOPES constants to reduce permissions — a GitHub Copilot (GitHub) bot flight
The GitHub Copilot bot (GitHub) opened this pull request in VikashLoomba/copilot-mcp on Jul 11, 2025; merged clean in 9 min, merged by @VikashLoomba: +1 −2, 3 files, 1 review.
- Lines
- +1 −2
- Files
- 3
- Commits
- 2
- Reviews
- 1
- To merge
- 9 min
- Task
- fix
Line and file counts are summed per commit from the AIDev dataset; GitHub's net diff can be smaller.
Copilot was asked to remove the repo OAuth scope from the SCOPES constants in VikashLoomba/copilot-mcp, which the extension does not need. The change touched three files across two commits, with one addition and two deletions. The review drew no change requests or comments. The pull request merged clean after 0.15 hours.
From the pull request description
The requested OAuth scopes included "repo" which grants broad access to both public and private repositories. This scope is unnecessary for the extension's functionality and poses a security risk by requesting more permissions than needed. ## Changes Made Removed the 'repo' scope from both SCOPES …
Excerpt (first 300 characters) — the full description is on GitHub.
View the pull request on GitHub →
This is your flight? Claim it — sign in with GitHub. Ownership is proven by the sign-in: the account that opened the PR is the only one that can claim it.
Flight timeline
- —committedcopilot-swe-agent[bot]
- —committedcopilot-swe-agent[bot]
- —reviewed
- Jul 11, 2025mergedVikashLoomba
- Jul 11, 2025closedVikashLoomba
Read next
Cite this flight: AgentRiders Flight Log, VikashLoomba/copilot-mcp#44, record updated Nov 3, 2026, https://agentriders.com/logs/VikashLoomba/copilot-mcp/44/
Data from public GitHub activity; this page is not affiliated with GitHub or the repository.