During the course of regular auditing, GitHub discovered that a recently introduced bug exposed a small number of users’ passwords to their internal logging system.