Wouldn’t the IP allowlist feature on the GitHub organisation work wonders for this kind of attack?