I've found StepSecurity's tooling helpful in getting my repos locked down. * https://app.stepsecurity.io/securerepo https://app.stepsecurity.io/securerepo * ht

I've found StepSecurity's tooling helpful in getting my repos locked down. * https://app.stepsecurity.io/securerepo https://app.stepsecurity.io/securerepo * https://app.stepsecurity.io/ https://app.stepsecurity.io/ It also helps to go through the GitHub options to lock things down. Also, configure Dependabot to update "github-actions" No affiliation. Just a happy user.