@lpcox @pelikhan In this declaration, I think users will be confused by repos: .
It means "Restrict the repositories the tools can access" but I suspect people will think it means "allow my tools to access these repositories".
I wonder if allowed-repos: or something may be better
github:
mode: remote
toolsets: [default]
allowed-repos:
- "myorg/*"
- "partner/shared-repo"
- "myorg/api-*"
min-integrity: approved