The Shippable team believes that feedback is the breakfast of champions! And one of the questions / user queries that we regularly get asked is - why does Shippable need read/write permissions to all my repos?
So, we would like to explain. We use read/write permissions for your repos only to auto configure webhooks. To make webhooks work, we need to add deploy keys to your repos. We never touch your code. You can control access - allow access to only public repos only or public and private repos. We don't ask for blanket permissions.