I don’t disagree with fine grained permissions, but something about the alarm is not logical because Github is already a third party you are trusting vis-à-vis

I don’t disagree with fine grained permissions, but something about the alarm is not logical because Github is already a third party you are trusting vis-à-vis your code.