A single git push command. That is all it would have taken for someone with write access to a repository on GitHub Enterprise ...
Trellix reports source code breach with partial repository access, no exploitation found, raising security concerns.