Support explicitly configured, non-member organizations in GitHub Ocean integration (PAT auth)
F
Fabian Mößner
The GitHub Ocean integration discovers and filters organizations using the /user/orgs endpoint, which only returns orgs the authenticating PAT is a direct member of. As a result, explicitly configured orgs are silently dropped whenever the token isn't a member, even though the same PAT can already read those orgs' repositories via /orgs/{org}/repos. This blocks a common enterprise setup: one technical token needs to ingest repositories shared across many GitHub organizations (for example, to run compliance and scorecard checks across all of them) without joining every org as a member. The only current workarounds are patching the integration or migrating the whole setup to GitHub App auth, neither of which scales. Honoring explicitly configured, PAT-accessible organizations regardless of membership would remove this limitation.