A note on permissions:

When logging in "with GitHub" on nix-ci.com, github will say that "nix-ci-app would like permission to 'Act on your behalf'".
What that means is that actions taken by nix-ci will look like they were your actions.
It does not imply that nix-ci has any more permissions that the ones you grant:

• GitHub needs nix-ci-app to have permission to authenticate your identity to login with GitHub.
• GitHub needs nix-ci-app to have "write" permissions to "repository checks" in order to make "checks" (CI jobs).
• GitHub needs nix-ci-app to have "read-only" permissions to "pull-requests" in order to receive events about pull-requests to make CI jobs.
• GitHub needs nix-ci-app to have "write" permissions to "pull-requests" in order to comment on pull-requests to have checks for a pull approved.
• GitHub needs nix-ci-app to have "read-only" permissions to "issues" in order to read comments on pull-requests.

We will never modify the contents of your repository.