A good first approximation of such a setting is to never publish on Github in the first place.

Of course, someone else can still upload your elsewhere-published code to GH. You cannot win.