Authentication and repository access are controlled by GitHub. Unison never receives your password.