Quick question: I tried setting it up but its asking for Write access to the pull requests. I am a bit wary about giving write access - is this required?
There are two GitHub apps we maintain. One with read access (DeepSource) and one with write access (DeepSource Autofix).
By default, on signup, you would be installing the app with read access -- this enables us to pull source code from GitHub on every commit and pull-request, run analysis and report issues as GitHub checks. This is sufficient if you would like to use DeepSource only to flag issues.
With the release of Autofix -- when a fix is available for a flagged issue, DeepSource creates a pull request to the repository with the patch. For this, you would be asked to install the app with write access (DeepSource Autofix). Note that, DeepSource always creates a separate branch with the fixes and creates a pull request. We do not perform any write operations beyond the above mentioned scope.
Comments
This looks awesome - congrats on the launch.
Quick question: I tried setting it up but its asking for Write access to the pull requests. I am a bit wary about giving write access - is this required?
There are two GitHub apps we maintain. One with read access (DeepSource) and one with write access (DeepSource Autofix).
By default, on signup, you would be installing the app with read access -- this enables us to pull source code from GitHub on every commit and pull-request, run analysis and report issues as GitHub checks. This is sufficient if you would like to use DeepSource only to flag issues.
With the release of Autofix -- when a fix is available for a flagged issue, DeepSource creates a pull request to the repository with the patch. For this, you would be asked to install the app with write access (DeepSource Autofix). Note that, DeepSource always creates a separate branch with the fixes and creates a pull request. We do not perform any write operations beyond the above mentioned scope.