GitHub allows enforcement of organization-wide 2FA authentication which ensures all new users joining your GitHub Organization have 2FA enabled on their accounts. This article provides a quick walkthrough of how to enable this setting in your GitHub Organization.
This article provides a quick walkthrough of how to update Base permissions for your GitHub Organization.
A repository should not be made public unless it is intended to be so. This article provides quick steps to change the visibility of a public repository to private in GitHub.
This document takes you through the steps required to run a local GitHub runner and use that to scan GitHub repositories for secrets using TruffleHog.
A list of top 10 security best practices to improve the security of your GitHub organisation.
Developers may sometimes, accidentally or due to the lack of security knowledge, store secrets, keys or passwords within code repositories. These may then get leaked over the Internet, resulting in attackers taking over accounts or accessing sensitive information. This article describes how you can scan your Github org repos for secrets.
