Another problem is you grant access to all repositories. Say you want to use a ci service to build your software, you need to grant them access to _all_ reposit

Another problem is you grant access to all repositories. Say you want to use a ci service to build your software, you need to grant them access to _all_ repositories but you only wanted to use them for one project. Github permissions should have an optional opt-in feature to only let the provider see the repositories you want them to show.