Couldn't you use fine grained github tokens for some of what you're accomplishing with the github/network filtering?
The fine-grained tokens have some surprising permissions for "read only" https://github.com/orgs/community/discussions/180063
alt Hacker News
The fine-grained tokens have some surprising permissions for "read only" https://github.com/orgs/community/discussions/180063