CISA contractor at Nightwing publicly exposed AWS GovCloud admin credentials, plaintext passwords, and internal CISA system access on GitHub for six months.