1 story taggedsource code security.
The private address you use to file issues by email can also push code and start pipelines as you. Treat it like a credential, because it is one.