we’re building an integration that relies on cloning repositories to perform analysis. Our app therefore requests access to code.
Now say there is account A with private repo foo (A/foo). If somebody forks it to B/foo and creates a pull request on A/foo then - since our installation is only installed on A - we can not clone B/foo to run our analysis and provide insights for this pull request as B/foo is a private repo.
Is this correct? I guess the only workaround would be to use the API to access the code for the specific pull request?