It's been admitted again. This contraption by GitHub is really causing chaos in the open source world and has been trained upon all public GitHub code; essentially those who have their code hosted there publicly, gave them permission to train copilot on their code. Now they are complaining about it after all these problems [0].
I warned against hosting source code on GitHub and going all in on GitHub Actions, mainly for them being unreliable for the past year. [1] (They go down every month). Now Copilot has gone and trained on every single public repo on GitHub as admitted right in this post, regardless of the copyright.
Maybe for organisations with serious projects, perhaps now's the time to leave GitHub and self-host your own somewhere else?