Actions > General > Workflow permissions Disable: Allow GitHub Actions to create and approve pull requests
Code security and analysis > Private vulnerability reporting Enable All Enable : Automatically enable for new public repositories
Dependabot Enable All Enable : Automatically enable for new public repositories
Dependabot security updates Enable All Enable : Automatically enable for new public repositories
Secret scanning Enable All Enable : Automatically enable for new public repositories Enable : Automatically enable for repositories added to secret scanning