-
1) Host your data on-prem or in VPC 2) Block pushing secret files into repos “two hackers were able to access a private area of Github...from there it is understood they found Uber's log-in credentials to Amazon Web Services” bbc.com/news/technology-42075306