If I use a commercial font as part of my website design, I am in fact publishing that font on my site and anyone can obtain a copy of it -- in fact, they automatically do merely by visiting my site! Does this mean all my visitors are "pirating"? Of course not. Github may make the font more accessible/searchable, but that doesn't change anything about the copyright status of the font.
Me publishing something on Github does not grant everyone free rights to it -- in fact, copyright law says no one has rights to it unless I specifically grant those rights. This is most commonly done with a LICENSE file. The copyright rules apply to everything in the repository, including my code, and any fonts, icons or stock images. The fact something is on Github (or the internet, in general) doesn't make it public domain, you still have to abide by the license terms.
While I think the suggestion that "on github" = "piracy" is stupid, I could see a couple things that could apply:
(1) If the license for the font explicitly states it's for "use" or "distribution" on a single domain. Unless the license is clear about it, it'd really be up to lawyers to argue over whether hosting the code in a public repository on Github can be considered "use" or "distribution" -- and ultimately that argument is about one non-authenticating public URL being okay while another non-authenticating public URL is not.
(2) If I've put a commercial font in my repository along with a typical LICENSE file containing MIT/GPL/BSD/whatever without explicitly stating the fonts are not under that license, then I'm basically mis-representing the license for that font (which I should not be allowed to do).
Given that putting a font on Github is technically no different from publishing on my site in terms of someone being able to 'pirate' it, personally I think a Github repository with a proper license (not doing (2)) is fine, because the LICENSE file effectively says it's not okay to just copy that font.
Me publishing something on Github does not grant everyone free rights to it -- in fact, copyright law says no one has rights to it unless I specifically grant those rights. This is most commonly done with a LICENSE file. The copyright rules apply to everything in the repository, including my code, and any fonts, icons or stock images. The fact something is on Github (or the internet, in general) doesn't make it public domain, you still have to abide by the license terms.
While I think the suggestion that "on github" = "piracy" is stupid, I could see a couple things that could apply:
(1) If the license for the font explicitly states it's for "use" or "distribution" on a single domain. Unless the license is clear about it, it'd really be up to lawyers to argue over whether hosting the code in a public repository on Github can be considered "use" or "distribution" -- and ultimately that argument is about one non-authenticating public URL being okay while another non-authenticating public URL is not.
(2) If I've put a commercial font in my repository along with a typical LICENSE file containing MIT/GPL/BSD/whatever without explicitly stating the fonts are not under that license, then I'm basically mis-representing the license for that font (which I should not be allowed to do).
Given that putting a font on Github is technically no different from publishing on my site in terms of someone being able to 'pirate' it, personally I think a Github repository with a proper license (not doing (2)) is fine, because the LICENSE file effectively says it's not okay to just copy that font.