They aren't solely expressing opinions though. They are backing it up with action. You may doubt their sincerity but that alone qualifies it as more than virtue signalling.
I don't doubt their sincerity at all. I believe that companies selling apolitical software services should not care about policing what customers use their software. We are talking about software that tracks changes of software, not facial recognition or drone firmware. Obviously, Github believes otherwise.