We only need read access to your public profile. No access to your repositories.