Securing the Repository

A repository is attacked through its maintainers' accounts, its dependencies, committed secrets and its code. GitHub 29 has a control for each, nearly all free on public repositories; BookNest now uses them.

Subsections