GitHub permissions are horrible. I need to create repo specific tokens. If I integrate with some 3rd party CI tool, why must I grant access to all repos? Or ca

GitHub permissions are horrible. I need to create repo specific tokens. If I integrate with some 3rd party CI tool, why must I grant access to all repos? Or can’t I grant read only instead of write and full control. I have access to lots of repos and orgs, I don’t want to worry about everything getting hosed if a single token is compromised. I also don’t like that for an org, I have to approve apps for anyone to use for anything. I’d like more fine grained controls to approve what they want to do, for the fewest repos necessary.