Unfortunately, Github, for all it's security efforts, still does not offer token permissions to be limited to "Issues" only. It's all or nothing when it comes to repos. Github's own native client/app doesn't have issue tracking either. This means there are lots of people installing these kind of apps for issue tracking and inevitably the security is as good as the weakest link in this chain. I wish someone at Github could remedy this.
IssuePost http://issuepostapp.com/ is a similar app. However, the developer has revoked the app for similar reasons.
> Issuepost is unavailable at the moment. Unfortunately, GitHub's OAuth API authorizes access to the entirety of users' private repos, and does not allow you to only request access to read/write issues. As a result, I have decided to pull the app from the App Store until I can find a better way to make the app more secure.
I can only conclude they're holding it back deliberately, since it seems both a glaring omission and simple fix. GitHub, prove me wrong..
One thing that I discovered after seeing that Shrink lists "Subscribed" issues is that ghi has an option '-f' which lets you filter by 'all', 'assigned', 'created', 'mentioned', or 'subscribed', which is all I need for my purposes.
I can only imagine so given that tools like this exist, and that Github continue to maintain Issues that people like it, but I personally don't love them. I honestly cannot put my finger on what I don't like but i've never been able to stick to it. In /real life/ I am using Jira or Redmine on a regular basis, maybe I'm just broken from their heavy and complex UI's.
There was a missed opportunity to name the app 'Shirk', though
