GitHub code-signing certificates stolen (but will be revoked this week)

There was a breach, so the bad news isn’t great, but the good news isn’t too bad…