Just signed up for strix, is it common for these type of products to want access to my Github repo's? Shouldn't the attack surface be outside them?