Better way of checking for github pushes that can't be spoofed