Homebrew installation requests to use my confidential keychain information. Should I allow it to do so? I was installing Homebrew on my MacBook Pro (as per the instructions on this page), when the following message popped up:


  git-credential-osxkeychain wants to use your confidential information stored in "github.com" in your keychain.
  The authenticity of "git-credential-osxkeychain" cannot be verified. Do you want to allow access to this item?
  Always Allow | Deny | Allow





Is it normal for this message to appear while installing Homebrew? Why does it need to use my keychain? What is it going to do with it?
Do I have to click 'Allow' for the installation to complete successfully? What will happen if I don't?
If the answer to the previous question is that I have to click 'Allow', what risks do I run doing so? Is there anything I can do to reduce the risks?




macOS Sierra version 10.12.4
My answer to question 2 ("Do I have to click 'Allow' for the installation to complete successfully? What will happen if I don't?") is - click "deny" and see what happens. The worst that could happen is that you'll have to reinstall Homebrew.

A wee bit of context from my experience in installing Homebrew: when I installed brew I didn't get this pop-up. However, after installing brew I set up a launchd job to brew update once an hour, and I ran into a daily limit which prevented hourly updates. Brew advised me the solution to this was to (a) create an account at Github, and (b) generate a token
for brew. My assumption is that you already have an account at Github, and that brew install is checking your keychain for a token. In my experience it's not needed for install, and you can generate a token later if you need one.