Related: #1

If we turn edudu_github into a module or feature, we maybe we should provide multiple ways you can configure your credentials:

1st choice use server environment variables.

2nd choice use a settings.php include like below.

3rd choice add add them to the db via an admin form and we use some sort of 2-way encryption to attempt to secure them. (Suggestions?)

2nd choice solution:

My solution:

mkdir sites/default/files/328bdw1989

prevent browsing here

echo "Deny from all
Options None
Options +FollowSymLinks" > sites/default/files/328bdw1989/.htaccess

replace this stuff with your personal github user/pass

echo '<?php
$conf['edudu_ghu'] = "yourusername";
$conf['edudu_ghp'] = "yourpass";' > sites/default/files/328bdw1989/ada89988895b2aa61237ff543188385b

Now manually upload this directory and files to the site on Pantheon by using Dev > Workflow > Import > Files. On your localhost, you can just create this dir under sites/default/files.

include the file in settings.php

echo 'include_once('sites/default/files/328bdw1989/ada89988895b2aa61237ff543188385b');' > sites/default/settings.php

Advantages of this:

credentials are not in the db
    they would either have to be in cleartext or
    encrypted using two-way encryption which is weaker than one-way encryption
credentials are not hardcoded in a version-controlled file. 
    .gitignore should ignore sites/*/files

see http://developer.github.com/v3/#authentication