Where your GitHub token is kept

If you connect a score to a GitHub repository, the app talks to GitHub using a personal access token you provide. The token is kept in your device's Keychain and is sent only to GitHub. Pushing sends your score's versions to the repository you chose, and nothing else.