you only write the wildcard if the repo is public