Pull requests in github are against branches, so keys and binaries are in the repo even if removed during review.