I ssh to an aws ec-2 from VSCode using Remote-SSH and opened the terminal tried to pull a private repo and it pulled without asking a user name or password.
How come is this possible? A security flaw?
Seems like this is a feature of VSCode-Remote-SSH with GitHub Pull Requests and Issues extension
Once you configured your VSCode with Github GitHub Pull Requests and Issues extension it takes advantage of that configuration in a remote machine as well. That's why it doesn't ask for user name or password.