diff --git a/auth/oauth.go b/auth/oauth.go
index 84dbe9c78..5a09b9c1c 100644
--- a/auth/oauth.go
+++ b/auth/oauth.go
@@ -47,6 +47,7 @@ func (oa *OAuthFlow) ObtainAccessToken() (accessToken string, err error) {
 	q := url.Values{}
 	q.Set("client_id", oa.ClientID)
 	q.Set("redirect_uri", fmt.Sprintf("http://localhost:%d/callback", port))
+	// TODO: make scopes configurable
 	q.Set("scope", "repo")
 	q.Set("state", state)