Github rotated credentials after the discovery of a vulnerability