Quoted from https://docs.docker.com/docker-hub/github/:
Linking Docker Hub to a GitHub account
Note: Automated Builds currently require read and write access since Docker Hub needs to set up a GitHub service hook. We have no choice here, this is how GitHub manages permissions. We do guarantee nothing else will be touched in your account.
This is not true: I agree that GitHub has a very unflexible everything-or-nothing policy. But GitHub also allows to add webhooks which is exactly what Docker Automated builds wants to install, so technically there is no reason why Docker should not work without which service binding.
For security reasons, I will never accept such a service binding policy.
Is it possible to configure Automated Builds giving Docker write (and other) permissions to GitHub