This is a technical risk with devastating consequences. When you submit a paper to Turnitin, the instructor can choose whether the class is a "repository" or "non-repository" account.
Institutional IT administrators should set up automated alerts using tools like GitHub Secret Scanning or custom GitRob searches to detect if university-associated course codes or syllabi are published online. turnitin class id and enrollment key github best