I am trying to write a simple bug traking app that would allow a third party to post an issue to my private repo. I only want them to have access to issues and the minimum of other info they need.
What scopes do I need? Is this possble at all?
The scope you need is public_repo.
You can read scopes information here : https://developer.github.com/apps/building-oauth-apps/understanding-scopes-for-oauth-apps/#available...