A practical GitHub hardening guide with exact organization, repository, Actions, ruleset, runner, token, secret, and CI/CD settings.
GitHub is part of the engineering control plane. It controls source code, CI/CD workflows, secrets, packages, release automation, infrastructure-as-code, and production deployment paths.
This guide is written as an implementation runbook.
For each control, you will see:
Control objective
Exact GitHub setting
GitHub Enterprise Server 3.21 is now generally available - GitHub Changelog
GitHub for Beginners: Answers to some common questions
GitHub finally pulls the plug on automatic install script execution for npm
Migrating Your GitHub CI to Hugging Face Jobs
GitHub announces npm security changes to tackle supply-chain attacks
Periodic code scanning of inactive repositories - GitHub Changelog
An enterprise-ready CISO-level GitHub security hardening guide covering governance, users, teams, repositories, rulesets,…
ガバナンス、ユーザー、チーム、リポジトリ、Rulesets、Actions、ランナー、OAuth Apps、PAT、シークレット、サプライチェーン・セキュリティ、監視、インシデント対応、証跡、監査統制を対象とした、エンタープライズ対応のCISOレベル…
Learn how to apply a detection-based threat model to secure your GitHub ecosystem by identifying key inputs, identities, and…
A practical incident response and hardening playbook for GitHub supply-chain malware, developer Macs, CI/CD, Docker, branch…
Enterprise administrators and billing managers can now set hard budget limits for GitHub Advanced Security (GHAS) SKUs,…
GitHub Enterprise Server (GHES) is the backbone for many organizations, providing a secure,...
