Github takes security seriously, this disclosure post is a proof of that.