zarfld / LinuxCnc_PokeysLibComp

Pokeys comp for LinuxCnc using https://bitbucket.org/mbosnak/pokeyslib.git
MIT License
5 stars 0 forks source link

setting up GitHub security features #163

Open zarfld opened 1 month ago

zarfld commented 1 month ago
  1. Enable Dependabot: Activate security alerts and automatic updates.
  2. Code Scanning: Set up CodeQL, run on push/pull requests.
  3. Branch Protection: Protect main, require checks, PR reviews, signed commits.
  4. Secret Scanning: Enable to detect exposed secrets.
  5. Access Control: Limit collaborator permissions, enforce least privilege.
  6. 2FA: Require for all collaborators.

These concise steps ensure robust security for your project.