Comment by tripleee

In this case you could give it its own SSH key, and only allow that key to access what you want. I actually do that, it doesn't share my own SSH key. It also has its own Github account instead of getting access to mine.

For access to services, most allow tokens to be scoped to only allow the things you want.