Chameleon uses Heroku for the hosting of our application servers. At this time we have performed the checks and recommended steps as outlined by Heroku, GitHub and our own internal policies. As a precaution we revoked tokens where appropriate and have no indication that any of our private repositories were accessed.