proper scoping of github app