Public does not mean confidential.

Keep genuinely sensitive material private

Unpublished inventions, source code that has not been released, business plans, security details, credentials, private correspondence, personal data, client information and other sensitive records should not be placed in public GitHub Pages repositories.

Before disclosure

1. Classify the information.
2. Ask whether secrecy has commercial or legal value.
3. Limit the disclosure to what is necessary.
4. Use a written NDA where appropriate.
5. Record exactly what was disclosed and under what terms.
6. Seek IP advice before disclosing material that may need a patent or registered-design strategy.