Unfortunately, the permissions issue is a limitation of Github's Oauth API. There's no way to ask for "read-only" permissions using their current integration scheme.

You can, however get a FOSSA API key without signing up for Github -- just register with an email here: https://app.fossa.io/account/register

Thanks! I filed a ticket for sbt documentation here: https://github.com/fossas/fossa-cli/issues/105.

For Golang, you need to be running the cli in a repo within your gopath; we should have some better feedback for it however. I opened another issue here (https://github.com/fossas/fossa-cli/issues/106), anything you can contribute?