All code on GitHub is protected by end-to-end transmission. If you do not want your sensitive data to be available to the public, you can save it in the private repository which is much more secure than the public one. Eliminating intermediaries with something like checksum is another great way to improve security practices on your GitHub account.