check github secret sign