Responsible Disclosure: Using GitHub Search (without logging in using SSO) still allows searching (4 mins read).
![Featured image for sharing metadata for article](https://media.jvt.me/4695321dd9.png)
Reporting on a HackerOne responsible disclosure that I found in GitHub, where you could exfiltrate data without signing in to GitHub SSO.