So, for your login service you scrap github periodically, and only trust things that have been there a month ago already.
(A bit like ssh being vulnerable to MitM attack on the very first connection, but not afterwards.)