We don't need access to private gists and are not enumerating the Gist API in anyway. The only code that gets shared with the site is when a new gist is create

We don't need access to private gists and are not enumerating the Gist API in anyway. The only code that gets shared with the site is when a new gist is created. Never previous gists. I'll investigate the Github API scope settings immediately and see if I can make the access level only public gist. Thanks for the head-up.