I tried to give an user read-only access to a private repository on GitHub a few weeks ago, and from what I could tell it isn't possible.