6 security settings every GitHub maintainer should enable this week

GitHub Security Lab describes six quick, free repository security settings—adding a SECURITY.md, enabling private vulnerability reporting, secret scanning with push protection, Dependabot and dependency review, code scanning (CodeQL), and branch protection—and promotes a "Protect Your Project" guided flow to enable them in 10–15 minutes; the guidance aims to reduce common, opportunistic exposures but does not claim to eliminate all risk.