The recent Uber breach saw attackers obtain credentials to a private GitHub repository, which they then used to access the company's network. Is a private repository well-protected from threat actors?