Say you're running a GitHub App and want to run it in multiple organizations, currently there is no way to restrict it to just 2 organizations but not any organization. GitHub doesn't provide this level of control over applications. A similar problem exists on Forgejo, if you define create a buildbot user, any repository which qualifies (i.e. has a matching topic and the buildbot user is an admin for it) will be automatically loaded as a project. This isn't a problem for private or restricted signup Forgejo instances, but for public ones like https://codeberg.org one may end up running other people's CI, which in the best case means an increased electricity bill, or in the worst case a compromised system.