GitHub Security Audit | GitHub
本章覆盖：leaked secret scenario；dependency alert；Dependabot PR；dependency review；vulnerable Action；overly broad token permission；unsafe workflow trigger；branch rule；CODEOWNERS；security policy；patch release；输出 Access / Dependency / Secret / Workflow / Release 五维安全审计。
本章知识点
- leaked secret scenario
- dependency alert
- Dependabot PR
- dependency review
- vulnerable Action
- overly broad token permission
- unsafe workflow trigger
- branch rule
- CODEOWNERS
- security policy
- patch release
- 输出 Access / Dependency / Secret / Workflow / Release 五维安全审计