Connect a GitHub repository
BinChicken connects to exactly one repository per installation, through a GitHub App — review what it can and can't do before installing it.
Requested permissions
Needed to create a branch and commit the implementation patch a run produces.
Needed to open the draft pull request a run hands off for human review.
Not requested
Merge control
BinChicken creates draft pull requests and does not implement the operations required to make them ready for review or merge them. Customer repository rules remain the final merge-control boundary.
This is enforced in layers: short-lived, repository-scoped tokens; your repository's own required pull-request review, which GitHub enforces against every caller, not just BinChicken's own code; and no Administration permission, so BinChicken cannot weaken that requirement.