We request repo + admin:repo_hook so we can install webhooks on the repos you pick. We never request write access to your code beyond installing the hook.