Repository settings control behavior
GitHub repositories have settings for access, branches, security, actions, webhooks, environments and other features. The exact options available depend on the repository type and account plan.
Important settings
Teams should pay particular attention to repository visibility, collaborator permissions, branch protection or rulesets, Actions permissions, secret access and deployment environments.
Least privilege
Give collaborators only the access they need. A developer who only reviews code does not necessarily need administrative repository permissions.
ADVERTISEMENT