Managing GitHub as code: A DevSecOps approach(apheris.com)

https://www.apheris.com/resources/blog/a-devsecops-journey-to-secure-and-standardize-github-repositories