Yes indeed. CircleCI needs read-access to the repos you need to test, and the ability to add a read-only SSH key to those repos. Unfortunately, the only way to

Yes indeed. CircleCI needs read-access to the repos you need to test, and the ability to add a read-only SSH key to those repos. Unfortunately, the only way to get that is to ask for read- and write-access to all private repos, which makes nobody happy (see http://developer.github.com/v3/oauth/#scopes http://developer.github.com/v3/oauth/#scopes for the actual options).