I’m not aware of any recent changes but we have certainly been working with private GH repos via AD for at least a couple of years. Very useful for working with private commercial partners, so we can share the models. Normal read-write access rules still apply AFAIK.
with AD 1.24.13 GitHub login process was consolidated. Now users using GitHub identity provider account use same auth token to access their GitHub repositories and don’t need additional step to authenticate when accessing GitHub repos as it is required for users using other identity providers.
In addition some users (@ian.mcnicoll can confirm) were asking for access to repos where they collaborate as team members and are part of some organisation.
This lead to extending required rights (imposed by GitHub api) needed to access repositories which user has access to when logged as GitHub user.
We understand your privacy concerns. If you don’t feel comfortable with required level of access, you can still use AD with other identity providers (Google, Microsoft).
Thanks @borut.fabjan for the explanation. I understand how using github beyond an authentication provider may help the users, as confirmed by Ian, and I’m not the kind who looks a gift horse in the mouth, so I’ll switch authentication providers as suggested.