GitHub already has an EDR. You just have to listen to it

The same GitHub event stream that organizations often treat as audit data can be used as behavioral telemetry to detect software supply-chain attacks.

Raccontata dainfoworld.com