No, this is people committing their private keys to a Github repository. Github is not at fault.
edit: submitter has since updated the title, was: "Github giving away your private key"
edit: submitter has since updated the title, was: "Github giving away your private key"
It looks like people have added their private keys to (public!!!) repos, and voila, a search allows others to find that.
Now he doesn't log in to my server. Just sends me a zip-file that I unpack and test. sigh.
Anyway, as usual the main problem exist between the chair and the keyboard.