There are bots out there that scrape sensitive information from Github repositories. If you inadvertently push up a commit with a secret in it, then consider it compromised. Email is no different in that regard.