only GH id & secret for app owned by the org is needed