Public, Private and Internal Repos

A company on GitHub Enterprise wants a shared tooling repository that every employee in the enterprise can read, without adding them one by one, but that must not be visible to the public. Which visibility fits?