It does say which sounds really ominous: https://imgur.com/a/w8M0wcE
The link on the page points to https://docs.github.com/en/apps/using-github-apps/authorizin... which basically says the app can do whatever whenever.
I think if the wording was different I would be able to successfully pitch this to my work.
Despite the scary warning, you're only granting the listed permissions.
> Despite the scary warning, you're only granting the listed permissions.
Is there a way for me to verify that that's the case? At least after granting the permissions?
If you have it installed for an organization its slightly different. Go to the organization, then Settings->Github Apps->Configure.
For me at least, it lists the permissions the app has. Additionally, if we ever want to request new permissions in the future, you will have to grant them.
On-prem is on our roadmap, we can definitely make that happen for you. We just went this route for now to make the app easily accessible to everyone