Does GitHub Apps can access my private repo?

[iamguest1923]

Select Topic Area

Question

Body

I have some sensitive data in my private repository. I had been allow some github apps to my account; is that a big problem? Does github apps can collect all my private data!

[Abdelrahmanwalidhassan]

Yes, the app can access all of your repos public and private ones. Unless you install the app with limited repo access by selecting the repos you want the app to access.

That's for your question. But an important note you shouldn't have sensitive/secret data in you repos even if they are private; You could use env variables.

[iamguest1923]

I had been allow lovable dev and some other page access my account repo by Github Apps. This is a silly question but: Should I still trust them?
thank you so much.

[Abdelrahmanwalidhassan]

If an app is popular I would think it is safe to install, and there is an option to install on selected repos for a reason.

You can configure installed Apps through the applications tab from the account settings.