That is a problem only because Github uses the root domain for its own pages. They could rather use www.github.com.

To solve your case on NoScript, whitelist the full address https://github.com/ and that will keep http subdomains out.