Exactly, that key is now completely compromised (it was the second it was public). You can still see it here: https://github.com/kaolti/Who-Runs-This/commit/764945d8d968b...

You will need to generate a new key and resign with the new one.

I removed it now, still looking into getting a new key.