Prevent loading files from repos with incorrect names

[ulrikandersen]

Description

This change adds a safeguard against accidentally loading files from non-eligible repositories.

Motivation and Context

Framna Docs builds upon loading files from repositories with a specific naming convention ("-openapi" by default). Prior to this change, the GitHub client used would allow loading files from all the repos the user has access to, including ones that do not have the correct name.

Loading files from non-eligible repositories is not a problem per-se, but it is an unexpected behaviour as we are specifically loading data from repositories only with the correct suffix.

It could become an issue if someone gains access to a user's session, as this would allow the exploiter to access files in all repositories that the user has access to. Specifically via the endpoint /api/blob/[owner]/[repository]/[...path] which is otherwise only used for loading images. Example: /api/blob/my-org/secret-project/README.md.

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)

[simonbs]

Awesome! 🚀