Can someone put this into context? If I sign up via github, I will be allowing the tool to "act on my behalf", with write access to my profile.

Why is it asking for write access to my profile?

I found this strange as well. And the interface seems absolutely broken on mobile. I cant find a button or ui to start a scan? Cant navigate out of settings either.