https://websecurity.agency/continuous-security-policy-enforcement-for-github-projects/