We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.
Rate limiting is not just for abuse prevention.
It also protects your system from:
- retry storms
- traffic spikes
- cascading failures
- expensive operations
Sometimes the safest request is the one you reject early.