This looks awesome - congrats on the launch.
Quick question: I tried setting it up but its asking for Write access to the pull requests. I am a bit wary about giving write access - is this required?
Quick question: I tried setting it up but its asking for Write access to the pull requests. I am a bit wary about giving write access - is this required?
By default, on signup, you would be installing the app with read access -- this enables us to pull source code from GitHub on every commit and pull-request, run analysis and report issues as GitHub checks. This is sufficient if you would like to use DeepSource only to flag issues.
With the release of Autofix -- when a fix is available for a flagged issue, DeepSource creates a pull request to the repository with the patch. For this, you would be asked to install the app with write access (DeepSource Autofix). Note that, DeepSource always creates a separate branch with the fixes and creates a pull request. We do not perform any write operations beyond the above mentioned scope.