Your private GitHub organization might not be so private . Without a third-party access policy applications are able to act on behalf of your users. This includes any scopes that the user grants permissions to the application- potentially including access to private repositories.
Read moreIs GitHub a security risk?
Even hosted Git services such as GitHub or GitLab offer limited security . Such services offer an easy-to-use interface with enhanced access controls. However, their convenience and ease-of-use can prove to be a hindrance as well, often leading to human error.
Read more