Github doesn't give the option for "read-only" on private repos. This is something I have struggled with at my startup.