https://vulert.com/blog/os-project-security-github-guidelines-practices/