GitHub

Several weeks after a major security incident at Heroku, the company said this week it "will not be reconnecting to GitHub until we are certain that we can do so safely, which may take some time" -- as news of the early April breach continues to percolate slowly

GitHub hacked after Heroku, Travis-CI 0auth tokens stolen in upstream attack

For repo security, take a look at Palantir's open source Policy Bot too...