Are you saying github should not scan? I don’t think there’s a central planner who will enforce that scanning is only in one place.