Limiting Commit API


Is there an REST API that can be used to get the committer for a given SHA, but not get the file details?

My use case is that my GithubApp asks for Read-only access Contents of a repository. With this access I’m able to see who committer is for a given SHA, but I can also get file details. I’m worried that users will be put-off by the idea that my app can download source code for a give commit.

Is there a way to get committer access without getting access to the files associated with a commit?

Thanks in advance.