Ah, so you're maintaining some kind of app which relies on github's API and you want to grant it an access token in order to view a repository's issues, code, etc.
But you don't want that token to be an almighty read/write one, do you?
That is a serious security vulnerability if someone succeeds in acquiring your token.
Fear not, I've got you covered. In this article, I'll show you how to create a read-only api token for your apps.
…
