whitelist github scripts