Hi everyone,

Hello -- We are encountering very odd behavior from Github Classroom.

Problem 1: I have a group assignment for the class that is done in groups of 2. When students accept the github classroom invite link for the assignment, they create a team for their new forked repo. Their team is getting added both to the forked repo and the PARENT repo (created by us to give out the assignment). As a result, any subsequent student who accepts the invite gets a forked repo with their team and all students teams who mistakenly got added to the parent. This means that students can see all repos that were forked after they created their repo. The repos are private but other students (their teams) are getting added to a private repo. We are having to manually clean up this issue.

Problem 2: We are seeing random github accounts getting added as outside collaborators to the parent repo holding the assignment. Our repo is private and we have neither invited nor accepted anyone to our repos. Yet, we have up to 60 outside collaborators show up on our assignment repos with read access. How is this even happening?

Here is an example parent repo with both problems: https://github.com/umass-cs677-current/spring24-lab2/settings/access

This repo has 60 strangers as outside collaborators and 3 student teams who got added to the parent (and then got access to many other student repos that were forked subsequently)

Any help would be highly appreciated. Also, this issue is only seen for group assignments. All individual assignments are working normally.