yup!

basically you can either have

a) a 'special' org account used only occasionally

b) everyone attributed as themselves

c) full-fat local feed, mirrored+filtered to Github, never use Github web UI for anything

d) a security nightmare