Day 17 of the 8th month
Cloning every repository without a token in the URL
How GitHub Auditor keeps a clone of every repository up to date, gives git its token through a short-lived GIT_ASKPASS script instead of the URL, and reports force pushes, dirty clones and deleted repositories.