diff --git a/invenio.cfg b/invenio.cfg
index b44c3518..fde98064 100644
--- a/invenio.cfg
+++ b/invenio.cfg
@@ -275,7 +275,11 @@ vcs_github = GitHubProviderFactory(
     # These options can be customised with the `VCS_PROVIDER_CONFIG_DICT` option, e.g. by passing it
     # as an env var on OpenShift.
     webhook_receiver_url="https://CHANGEME.cern.ch/api/hooks/receivers/github/events/?access_token={token}",
-    config={"insecure_ssl": False, "shared_secret": "CHANGEME"},
+    config={"insecure_ssl": False, "shared_secret": "CHANGEME", "allowed_repository_type": "public"},
+)
+vcs_github.repo_list_message = _(
+    "If your organization's repositories do not show up in the list, please ensure you have enabled third-party access. "
+    "Only public repositories are shown."
 )
 
 vcs_github_oauth_remote_config = vcs_github.oauth_remote_config
@@ -287,7 +291,11 @@ vcs_gitlab = GitLabProviderFactory(
     name="GitLab",
     base_url="https://gitlab.cern.ch",
     webhook_receiver_url="https://CHANGEME.cern.ch/api/hooks/receivers/gitlab/events/?access_token={token}",
-    config={"shared_validation_token": "CHANGEME"},
+    config={"shared_validation_token": "CHANGEME", "allowed_project_visibilities": ["internal", "public"]},
+)
+vcs_gitlab.repo_list_message = _(
+    "If your project does not show up in the list, please ensure you have at least the 'Maintainer' role on the project or its group. "
+    "Only public and internal projects are shown."
 )
 
 vcs_gitlab_oauth_remote_config = vcs_gitlab.oauth_remote_config