{
  // Capture mode: "denylist" (default) or "allowlist"
  "mode": "denylist",

  // Per-repository settings
  "repos": {
    // Repo identified by remote URL
    "github.com/myorg/public-repo": {
      "allow": true,
      "visibility": "team",
    },
    "github.com/myorg/private-repo": {
      "allow": false,
    },
  },
}