You give apps explicit access to repos (or the full org). If you chose full org, what do you expect?