[somehnguy]

A comment above says that the for private repos only the repo owner will be notified vs sending the secret to the partner for public repos